Contents
1. What Data We Collect
We collect the bare minimum needed to make the slop work. No creepy tracking, no selling your soul to data brokers โ just what it takes to run the site, run the games, and keep accounts safe.
- Account Data: Email addresses, usernames, and profile configurations (when you create an account or subscribe to email updates).
- Analytics & Product Data: Pages viewed, clicks, scroll depth, approximate country/region derived from your IP address, browser and device type, and UTM/referrer source. We also compute a stable pseudonymous browser fingerprint (a SHA-256 hash of things like user agent, screen size, timezone, and language) so the same visitor in the same browser counts as one person even across incognito sessions. This fingerprint is not tied to your real identity.
- Session Replay: We record anonymized, video-like replays of your interactions on this marketing site (clicks, scrolls, mouse movement, and page transitions) via PostHog so we can see where the experience is confusing or broken. Text inside form fields and password inputs is masked before the recording leaves your browser. Replays are tied to the pseudonymous fingerprint above, not to your name or email. Session replay runs on the superslop.net marketing site only โ it is not active inside our games.
- Telemetry Data: Device specs and crash logs (so we can fix what breaks).
- Transaction Data: Purchase history and billing info (processed securely by our payment provider โ we never see your full card number).
- Cookies & Local Storage: Used by our analytics provider to recognize returning visitors, and to save small preferences on the site. No third-party ad/tracking cookies.
2. Games & Leaderboards
Some of what we collect on this marketing site doesn't apply to our games. Our mobile and web games โ including Shmerge โ work differently, so here's exactly what they do and don't do. You do not need an account, email address, or sign-in to play.
- Public Leaderboard: When you submit a score, we store and publicly display a nickname of your choosing alongside your high score. The nickname is auto-generated by default (e.g. "Shmerger4821") and you can edit it. Behind the scenes our leaderboard stores only a board id, your nickname, your score, and a timestamp โ no email, no real name, no account is attached.
- Deleting Your Leaderboard Data: The game has a built-in option to delete your scores. Using it removes all scores stored under your nickname from the leaderboard. You can also email privacy@superslop.net if you'd like help.
- Motion / Tilt Controls: If you turn on tilt controls, the game reads your device's motion sensor on your device only to steer gameplay. This motion data never leaves your device and is never sent to us.
- Feedback Form: If you choose to send feedback from inside a game, we receive your free-text message along with your nickname, the platform you're on, and the app version, so we can understand and reproduce what you're describing.
- Gameplay Analytics: Our games send a small set of anonymous product-analytics events to PostHog โ things like a game starting, a game ending (including the score), the main menu being shown, and the app version. These events are not tied to your name or email. Our games use no autocapture and no session replay โ session replay runs on the superslop.net marketing site only (see section 5).
- No Ads, No Purchases: Our games show no advertising, contain no in-app purchases, and include no third-party advertising or ad-tracking SDKs.
3. How We Use Your Data
Service Provision
Making the games run, keeping your progress saved, and letting you talk to other players without the whole thing catching fire.
Analytics & Improvement
Aggregate stats so we can tell which ducks are too powerful and nerf them.
4. Third-Party Services
We use a small set of standard infrastructure partners, each contractually bound to only handle data for the service we ask them to provide:
- Amazon Web Services (AWS) โ hosts the site, runs our email pipeline, and stores contact/subscribe submissions.
- PostHog โ product analytics, session replay (see section 4), and feature flags. Sees the Analytics & Product Data described above.
- Google Fonts โ serves the typefaces on this site.
We don't sell your data to ad networks or data brokers. No third-party ad pixels are loaded on this site.
6. Children's Privacy (COPPA)
We don't knowingly collect personal info from kids under 13 without verifiable parental consent. If you're a kid, check with a parent before making an account. If you're a parent and believe your kid signed up without permission, email us and we'll wipe it.
5. Session Replay
We use PostHog's session replay feature on the superslop.net marketing site to reconstruct how visitors move through the site โ clicks, scrolls, mouse movement, and page transitions โ so we can identify usability issues and broken flows. No audio or camera is ever captured.
- What's masked by default: Text inside form inputs (name, email, message) and any password fields are scrubbed on-device before the recording is sent to PostHog. We never see what you typed into the contact or subscribe forms inside a replay.
- How sessions are identified: Recordings are tied to the pseudonymous browser fingerprint described above, not to your name or email address.
- Where it runs: The superslop.net marketing site only. Our games do not run PostHog session replay.
- How to opt out: Use your browser's Do Not Track setting, an ad/tracker blocker, or email privacy@superslop.net and we will suppress recording for your visitor ID.
7. Data Retention
We keep account data while your account is active and for a reasonable period after, for backup and legal compliance. Delete your account at any time and we'll purge personal data on a rolling schedule.
8. Your User Rights
Right to Access
Right to Rectification
Right to Erasure
Right to Restrict
Data Portability
9. Contact Data Protocol
Need to escalate a privacy concern? Email us and we'll get back to you.
Contact Compliance โ๏ธ