SLOPGUESSER · PRIVACY

PLAY WITHOUT
BEING TRACKED.

SlopGuesser uses one strictly necessary anonymous session cookie so your current game, score, and private duel can survive a refresh. You do not need an account, and the game does not sell data or use advertising.

Controller and purpose

The data controller is the person or organisation operating this deployment. Use the deployment’s published contact channel for privacy requests. The service processes the minimum data needed to run the game, prevent replay/rate abuse, keep scores consistent, and monitor reliability; it does not make decisions with legal or similarly significant effects.

Cookies

slopguesser_session is HttpOnly, SameSite=Lax, Secure on HTTPS, and expires after 12 months. It contains an opaque random session token; provider keys, database credentials, and source metadata are never placed in it. No analytics, advertising, fingerprinting, or optional cookies are set.

Operational data

The server stores anonymous game state needed to score Daily and private Versus rounds: an opaque session token hash, generated display name, rating, answers, and match state. Reliability counters are UTC date aggregates (for example, Daily answers and media requests) without IP addresses, user agents, referrers, device fingerprints, advertising IDs, or cross-site identifiers. The aggregate counters are visible only to the authenticated operator dashboard and are retained for 30 days. If you voluntarily add an X handle, it is displayed as an unverified public leaderboard link until you remove or replace it; it is never required to play.

Lawful basis and providers

The strictly necessary cookie and game state are used to provide the game you request. Anonymous reliability counters are used on the operator’s legitimate interest in security and service reliability. No optional analytics or advertising processing is performed, so no consent banner is needed for those technologies. Vercel runs the application and Turso stores the game database; the operator should review their current processor terms, hosting region, and transfer safeguards for this deployment.

Your choices and rights

Because no optional tracking is used, there is no behavioural-consent banner to accept. You can block or delete the necessary cookie, but gameplay continuity and private-duel participation will then reset. You can clear a saved X handle from the Profile screen. Where EU GDPR or UK GDPR applies, you may ask the controller for access, correction, deletion, restriction, objection, or portability where applicable, and may complain to your relevant supervisory authority (in the UK, the ICO). Contact the operator so an anonymous session can be located safely; the service has no account profile or advertising record to export.

Retention and children

Aggregate reliability rows are automatically pruned after 30 days. Game history and immutable Daily/Versus records are retained only as long as the operator’s published game-history policy requires. The game is not directed at children; do not submit an X handle or other personal information.

Last reviewed: 23 July 2026 · This notice describes the application’s technical data practices and is not legal advice.