Privacy

SlopGuesser is run by Daniel Martinez, based in Haarlem, the Netherlands. I’m responsible for the data described here. The site runs on a server in Amsterdam.

No account, no email

You don’t sign up. The game never asks for your email address or your real name. Signing in with GitHub is optional; see below.

Cookies

Three cookies, all needed for the game to work, so they don’t need your consent:

• sg_player keeps you as the same player in this browser, for about 400 days. It holds a random key; the server keeps only a scrambled (hashed) copy of it, and when it was last used.
• sg_suggest remembers the name and avatar suggested to you before you start, for one day.
• sg_github_state exists only while you sign in with GitHub, for at most ten minutes. It checks that the answer coming back from GitHub belongs to you.

There are no advertising or tracking cookies.

What the game keeps

• Your player name, generated or the one you typed, and your avatar: a generated one or your GitHub picture.
• Your guesses, how long each one took, your scores and your reactions, in the daily and in practice (up to 10 rounds a day).

Your name and avatar are public on the leaderboard and in the list of recent players. A shared result shows your score, but not your name. All of this is kept until you ask me to delete it.

Signing in with GitHub

If you choose to sign in with GitHub, I keep your GitHub user number and username, to recognize you on your next sign-in and on other devices. GitHub doesn’t share your email address or anything else with the game. Your name on the leaderboard stays the one you chose; it only becomes your GitHub username if you pick that on your profile.

If you show your GitHub picture as your avatar, everyone who sees it loads it from GitHub’s servers, so GitHub sees their IP address, as with any GitHub picture on the web. Signing out ends the sign-in on that device only. To stop the game’s access entirely, revoke it in your GitHub settings, under Applications.

Analytics

I use PostHog, hosted in the EU, to see how the game is played and what to improve. It stores nothing on your device. It receives the pages you visit and what you click, game events such as your guesses, errors the site runs into, the page that sent you here, and your IP address, which PostHog turns into a rough location (country and city).

It also records sessions, how you move through the site, so I can spot what’s confusing or broken. Anything you type into a field is hidden in those recordings. Each visit gets a new random identifier, and PostHog doesn’t link your visits together. It keeps events for up to a year and recordings for about a month.

The reason for all of this is my legitimate interest in understanding how the game is used, to make it better.

Server logs

Like most websites, the server keeps short technical logs, which can include your IP address, to keep the site running and secure.

Your data, your choice

You can ask what I have about you, or ask me to delete it. Get in touch through danielmartinez.dev and send me the link from Share result: it points to your player without showing your name. I’ll delete your player and everything linked to it.

If you think I’m handling your data wrongly, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.