Privacy policy

This policy covers slopaf, the browser arcade at https://slopaf.com. It is run by its maintainers (“we”).

To ask us anything about your data, use the contact form and choose Privacy request.

Your player name

The name you pick when you first play: 3–20 letters, numbers or underscores. Other players see it in rooms and chat, and a room's host name appears in the list of open rooms.

A guest account

When you pick a name, our account system creates a guest account with a random account ID, and a random device credential generated in your browser. There is no real name. The credential is what lets you back in, so it stays on your device (see Cookies and local storage).

An email and password, if you save your account

From your profile you can add an email address and a password to a guest account so you can sign in on other devices. We store the address and a salted hash of the password, never the password itself. We don't send email, so the address is not verified and there is no password reset yet.

Rooms and matches

Which room you are in, whether you are ready, the character and settings you chose in the game, and who hosts the room. A match's live state exists only in the game server's memory while it runs.

Room chat

Messages you send in a room: the text (up to 280 characters), your name, your account ID and the time. A room keeps its last 80 messages.

Messages and submissions

If you use the contact form or submit a game, we keep what you write, including your name and email address, so we can reply.

Technical data

Like any web service, our servers see your IP address, your browser type and the time of each request. Web-server and service logs use this to keep the arcade running and to spot abuse.

• •We don't run ads, and the portal has no analytics or tracking scripts.
• •We don't sell or rent your data.
• •We don't ask for your real name, phone number or location.
• •We don't set cookies.

• •To run the arcade: accounts, rooms, matchmaking, chat and matches.
• •To keep it safe and fair: spotting spam, abuse and cheating, and enforcing the content policy.
• •To answer your messages and review the games you submit.
• •To fix problems, using logs. We don't build profiles of players or measure their behavior for marketing.

If you are in the UK or the European Economic Area, we rely on three legal bases: providing the service you asked for, our legitimate interest in keeping it secure and free of abuse, and your request when you write to us. We don't rely on consent, because we don't do anything that needs it.

• •Other players: your player name, your room's members and its chat are visible to the people in the same room.
• •Google, when you open a game page: Turbo Kart Rally currently loads two fonts (Lilita One and Nunito) from Google Fonts, so Google receives your IP address and browser details. The rest of the portal serves its fonts itself.
• •Authorities, if the law requires it or if we need to protect someone from serious harm.

When you follow a link to another site, that site's own policy applies.

Guest accounts

Until you ask us to delete them.

Rooms and chat

Rooms and their chat are temporary: a room expires two hours after its latest match starts and about half an hour after that match ends. A waiting room that nobody has been in for a few minutes is closed.

Messages and submissions

As long as we need them to reply, review and keep a record of what we decided. You can ask us to delete yours at any time.

Server logs

As long as needed for security and debugging.

Browser storage

Stays in your browser until you clear it.

Depending on where you live, you may have the right to see the data we hold about you, correct it, delete it, restrict or object to how we use it, and receive a copy. To use any of these, use the contact form and choose Privacy request. Give your player name so we can find your account. We can't verify who owns an account that has no email, and an email address is not verified either, so we may ask you to show the account is yours before we act on it.

You can also clear slopaf's data from your browser at any time. If you think we've mishandled your data, you can complain to your local data protection authority.

slopaf isn't meant for children under 13 and we don't knowingly collect their data. If you think a child has given us personal information, contact us. Where the law sets a higher age, that age applies.

Messages and submissions can be read only by the people who run slopaf. No system is perfectly secure, and we can't promise otherwise.

We may update this policy. The date at the top shows when it last changed.