Privacy Policy
Last updated:
The short version. You can play every game on Slopz without creating an account or giving us your name or email. We store a few things in your browser so the games work, keep an anonymous ID so leaderboards work, and — only if you say yes — use Google Analytics and let Google personalise ads. We never sell your personal information.
1. Who we are
Slopz ("Slopz", "we", "us") operates the website slopz.io and the games served from it. Slopz is run by an individual developer based in Serbia, who is the data controller for the processing described here. For any privacy question, request or complaint, contact privacy@slopz.io.
2. What this policy covers
This policy covers slopz.io and the games we operate ourselves under
slopz.io/games/ — currently Slopy Dodge, Manippulator, Colorwheel and Market
Packer. If we ever link to a game or site hosted by someone else, that site's own privacy
policy applies once you are there.
3. What we process, why, and on what legal basis
The legal bases below refer to the EU/UK General Data Protection Regulation (GDPR) and the equivalent provisions of Serbia's Law on Personal Data Protection.
| What | Why we use it | Legal basis |
|---|---|---|
| Server logs | IP address, browser/device string, requested page and time, recorded by our web server and hosting provider. Used to deliver the site, keep it secure and investigate abuse. | Legitimate interests (running and securing the service) |
| Your privacy choice | Whether you accepted or rejected analytics and personalised ads, and when. Kept in your browser's local storage so we don't ask on every page. | Legal obligation (keeping a record of consent) |
| Game data on your device | Best scores, sound settings and similar, saved in your browser's local storage. It stays on your device. | Necessary to provide the game you asked to play |
| Anonymous player profile | A random identifier created for your browser when a game needs one (for example when you start a scored run or the game saves your progress online), the player name shown next to your scores, your scores, level progress and achievements, and timestamps of runs and score submissions. Used for leaderboards, online progress saving and to reject cheated scores. Your player name and scores are visible to other players on leaderboards — don't put real names or contact details in a player name. | Necessary to provide the leaderboard and save features; legitimate interests (fair play) |
| Google sign-in (optional) | In games that offer "Sign in with Google" (currently Market Packer), choosing it links your progress to your Google account so you can keep it across devices. We then receive your Google account identifier, email address, name and profile picture from Google. You never need to sign in to play. | Necessary to provide the feature you chose to use |
| Analytics (only if you allow it) | Google Analytics 4 records page views and a small fixed set of events (a game was opened, started, finished or failed to load; a search was made — its length and result count, never the text you typed). Google also processes your IP address, device/browser details and its own cookie identifiers to produce these statistics. The Google Analytics tag is not loaded at all unless you allow analytics. | Consent |
| Advertising | Our games show ads served by Google AdSense. No ad is requested until you have answered the privacy banner. See Section 5 for what Google processes and how your choice changes it. | Consent (personalised ads); legitimate interests (funding free games with non-personalised ads) |
| Messages you send us | Your email address and whatever you write, used to answer you. | Legitimate interests (responding to you); legal obligation for rights requests |
We do not ask for or intentionally collect special categories of data (such as health, religion or precise location), and we don't build advertising profiles ourselves.
See it for yourself
Each game we operate has an in-game "Data & Privacy" panel — opened from the settings menu or the small (i) button, depending on the game — that shows what we can currently see for your browser: the game, your player name, your anonymous ID, your browser language and browser/OS string, and your current consent choice. Opening the panel does not create or change any data.
4. Cookies, local storage and your consent choices
When you first visit, a banner lets you accept all, reject all or customise — choosing analytics and personalised advertising separately. Rejecting is one click, the same as accepting, and nothing optional is switched on in advance. Strictly necessary storage (your privacy choice, game saves, the anonymous player session) is used either way, because the site and games can't work without it.
- You can change or withdraw your choice at any time with (also linked in the footer of every page). Withdrawing is as easy as giving consent and doesn't affect processing that already happened.
- We ask again after 12 months.
- If your browser sends a Global Privacy Control signal, we treat it as a rejection of analytics and personalised ads without showing you the banner.
- We pass your choice to Google's tags through Google Consent Mode.
The full list of what is stored, by whom and for how long is in our Cookie Policy.
5. Advertising
The games are free because they show ads: occasional full-screen ads between rounds and optional "rewarded" ads you can choose to watch for an in-game benefit. Ads are served by Google AdSense (its "H5 Games Ads" product). The portal pages themselves (the game list and these text pages) do not show ads.
- If you allow personalised advertising, Google and its advertising partners may use cookies, your IP address, device information and your activity on this and other sites to show ads based on your interests.
- If you don't, the games ask Google for non-personalised ads only. These are chosen from context (such as the page you are on and your general location) rather than from a profile of you. Google states that non-personalised ads may still use cookies or similar identifiers for frequency capping, aggregated ad reporting and to combat fraud and abuse.
Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites. You can read how Google uses information from sites that use its services, control ad personalisation in Google's Ads Settings, and opt out of many vendors' personalised advertising at youronlinechoices.eu (Europe) or aboutads.info (US). The ads themselves are chosen and delivered by Google; we don't control the content of individual ads and don't receive information that identifies you from them.
6. Who receives your data
We use a small number of service providers, and share data with no one else:
- Google (Google Ireland Limited for people in the EEA, UK and Switzerland; Google LLC elsewhere) — Google Analytics, Google AdSense, Firebase (anonymous sign-in, leaderboard database and score-checking functions) and Google Sign-In. For advertising, Google acts as an independent controller of the data it collects.
- Supabase, Inc. — database and sign-in service used by some games for leaderboards and saved progress.
- Our hosting provider — runs the server that delivers the site and keeps its request logs.
We may also disclose information if the law requires it or to protect our rights or the safety of players. We do not sell personal information.
7. International data transfers
Slopz is run from Serbia, and our providers process data in other countries, including the United States. Where personal data leaves the EEA, UK or Serbia for a country without an adequacy decision, the transfer relies on appropriate safeguards — the EU–US Data Privacy Framework for certified providers such as Google, and Standard Contractual Clauses otherwise. You can ask us for more detail on the safeguards used.
8. How long we keep data
- Server logs — a short period for security and troubleshooting (normally no longer than 30 days), then deleted.
- Anonymous player profile, scores and saved progress — for as long as the game's leaderboard and save features are offered, or until you ask us to delete them. Temporary run sessions used for score checking expire after about an hour.
- Google sign-in link — until you ask us to remove it or delete your profile.
- Analytics data — held in Google Analytics for no longer than 14 months.
- Data in your browser — until you clear your site data; your privacy choice is asked again after 12 months. Cookie lifetimes are listed in the Cookie Policy.
- Emails — for as long as needed to deal with your request, and afterwards only where we need a record of how a rights request was handled.
9. Your rights
Under the GDPR, UK GDPR and Serbian data-protection law — and similar laws elsewhere — you have the right to:
- Access the personal data we hold about you and get a copy of it;
- have inaccurate data corrected (you can change your player name in-game at any time);
- have your data erased;
- restrict or object to processing, in particular processing based on legitimate interests;
- receive data you gave us in a portable format;
- withdraw consent at any time, through Cookie Settings;
- complain to a data-protection authority — the one where you live or work, or Serbia's Commissioner for Information of Public Importance and Personal Data Protection.
To use any of these rights, email privacy@slopz.io. It's free. Because most players are anonymous to us, please include the anonymous ID shown in the game's Data & Privacy panel so we can find your data; we may ask for information to confirm a request really comes from you. We answer within one month (this can be extended by two further months for complex requests, and we'll tell you if so). Clearing your browser's site data removes everything stored on your device, but not the profile held on our servers — email us for that.
10. Additional information for US residents
Depending on your state (for example under the California Consumer Privacy Act), you have the right to know what personal information we collect and why, to access, correct and delete it, and not to be discriminated against for using these rights. The categories we collect are identifiers (IP address, anonymous player ID, cookie identifiers and, if you sign in, your Google account details), internet activity (pages and game events) and approximate location derived from IP address, used for the purposes in Section 3.
We do not sell personal information. Allowing personalised advertising may count as "sharing" for cross-context behavioural advertising; it is off unless you turn it on, you can turn it off again in Cookie Settings, and we honour Global Privacy Control signals as an opt-out.
11. Children
Slopz is a general-audience site. It is not directed at children under 13, or under the age at which your country lets you consent to data processing yourself (up to 16 in parts of Europe). We don't knowingly collect personal data from children below that age or show them personalised ads. If you're a parent or guardian and believe your child has given us personal data, contact us and we will delete it.
12. Automated decisions
We don't make decisions about you by automated means that have legal or similarly significant effects. Submitted scores are checked automatically for plausibility, and a score that fails the check simply isn't added to the leaderboard.
13. Security
The site is served over HTTPS and access to our databases is restricted. No system is perfectly secure, though; if a breach is ever likely to put your rights at risk, we will notify the authorities and affected people as the law requires.
14. Changes to this policy
We'll update this page when the site or the law changes, and change the "Last updated" date at the top. If a change affects something you consented to, we'll ask for your consent again rather than assume it.
15. Contact
Questions or requests about this policy or your data: privacy@slopz.io.