Privacy Policy

1. Who manages this site

SlopStory is a family-managed creativity portal. The site administrator controls creator accounts, reviews uploads, and decides which projects are public. Creator accounts for children should be created and supervised by a parent or guardian.

2. Information we collect

• Creator account information: a username, securely hashed password, account status, and last login time.
• Creator profile and project information: creator name, biography, uploaded project files, title, description, cover image, publication status, and upload date.
• Security information: short-lived, keyed hashes derived from login details or a visitor's IP address and browser information. These support rate limiting, audit records, and daily engagement deduplication without storing the raw values in those records.
• Engagement information: project views, plays, likes, and shares.
• Essential session cookies: used only to keep administrators and creators signed in and to protect forms. SlopStory does not use advertising cookies.

3. How information is used

We use this information to authenticate accounts, review and publish projects, generate project cover images, operate public collections, show engagement totals, investigate security events, prevent repeated or automated activity, and maintain the service.

4. Public information

A published creator name, biography, project title, description, cover image, project contents, and engagement totals are visible to anyone. Children should never place their address, school, phone number, email address, precise location, passwords, or other identifying information inside a profile or uploaded project.

5. Sharing and external services

SlopStory does not sell personal information or use it for behavioural advertising. Uploaded projects run in a restricted sandbox and are prevented from making ordinary network connections by the site's player policy. If a visitor chooses a file inside a project, that project may read it in the current browser tab, but the player policy prevents submitting it to SlopStory or sending it over the network. Hosting and infrastructure providers may process limited technical information as necessary to deliver and secure the website.

6. Retention and deletion

Project files and account records are kept while they are needed for the portal. Daily engagement-deduplication records are scheduled for deletion after 365 days, and login-attempt records after 30 days. Backups and security logs may remain for a limited additional period. A parent or guardian may ask the administrator to correct or remove a child's account, profile, or project.

7. Security and choices

Safeguards include password hashing, access controls, request protection, restricted file validation, and sandboxed project playback. No internet service is completely risk-free. Visitors can browse without creating an account; creators may ask the administrator to reset or disable their account.

8. Changes and contact

This policy may be updated when the service or its data practices change. The effective date above will show the latest material revision.

Privacy questions or deletion requests: email privacy@slopstory.com.