Cookie Policy

1. The short version

This site sets three cookies, and all three are strictly necessary. They exist so you can be signed in, so a game round is charged to the right account, and so a second factor can be checked when you sign in. There are no advertising cookies, no analytics cookies and no third-party trackers, so there is no consent banner and nothing to opt out of.

2. The cookies, individually

• slop_session is your sign-in. It holds a session token, is readable only by the server, is sent only over HTTPS, and is scoped to this host alone. It is deleted when you sign out or when the session expires.
• slop_originals records which play session a game round belongs to. It is signed, and it is checked against the signed-in account on every request, so a session left behind in a shared browser cannot charge a bet to the previous person.
• slop_totp_challenge exists only for the minutes between entering your password and entering your authenticator code, if you have enabled one. It is readable only by the server and is set with the strictest same-site policy the browser offers.

None of the three is readable by JavaScript on this page, and none carries a name, an email or any value that identifies you outside our own systems.

3. Browser storage, which is not cookies

We also keep some preferences in the local storage of your browser. Local storage is not sent to us with a request, the way a cookie is.

• The currency you last chose to play in, and a recent snapshot of exchange rates for the balance display.
• Per-game settings, such as whether sound is on, whether keyboard shortcuts are on, and animations you have turned off.
• Your recent searches in the game search box.
• Games you have saved as favourites. When you are signed in these are also saved to your account, so they follow you between browsers.
• Where you left off in the Creator Studio, if you use it.

Clearing site data in your browser removes all of them.

4. Third parties

Games are served in a frame from a separate origin we control, which is a security measure rather than a third party. It means a game cannot read the page around it or reach your session.

We load no third-party scripts, fonts or analytics on any page, and the pages that handle your account and your money talk only to our own servers.

5. Contact

Questions about this policy: SUPPORT_EMAIL.