Effective 23 September 2026
Privacy
The Slop Works is a small site of free browser games. Almost everything about how you play stays on your own device. This page says exactly what leaves it, where it goes, and how to make it go away.
Your game saves
Each game keeps its progress in your browser's own storage, on your device. Saves are never sent to us and we cannot see them. Clearing your browser's site data for theslopworks.com deletes them; the games also have their own reset and wipe buttons that remove only their own saves.
When you view a Donut Dynasty leaderboard, your browser keeps a copy of it in this tab for up to five minutes, including where you place on it. Your account details (email, name and photo, or your username) are never kept this way: they are fetched fresh each time. Refresh gets current boards; signing in, signing out or deleting your account sets aside the tab's copy.
Site analytics
We use Vercel Web Analytics to count visits. It does not use cookies. For each page view it records the page, the page you came from, your country or region, and your browser, device type and operating system. Visitors are told apart by a hashed identifier derived from the request that is discarded after a day, so it cannot follow you across days or across other sites. We use these counts to see which games people play. Nothing here identifies you.
Competitive Mode
Some games have a Competitive Mode with weekly and permanent leaderboards. You can play without signing in. Online runs request a seed and a temporary run identifier from our server; scores stay on your device until you sign in and submit them. To put a score on the board you sign in, either with Google or with a username and password you make here. If you sign in with Google:
- We ask Google for your account identifier, your email address, your name and your profile photo. The identifier is kept only as a one-way hash, so it cannot be turned back into your Google account. The email, name and photo are kept so your account page can show you which account you are signed in with. They are never shown to other players, never used to contact you, and never shared.
If you make a username instead:
- We store your username, a one-way hash of your password, and a one-way hash of your recovery code. We never store your password or recovery code themselves, and we cannot see or recover either. We ask for no email, no name and no photo. Your username is never shown to other players.
- Your recovery code is shown once, when you make the account or use the code to reset your password. It is the only way to set a new password, because there is no email on file to reset it with.
- To stop password guessing we count failed sign-in attempts for each username and each network address. The counts delete themselves after fifteen minutes.
Either way:
- We also store the bakery name you choose to appear on the board, and the scores you submit, together with the settings of each ranked run (the flavors and recipes you chose, and when you played). Weekly podium finishes, trophy counts and Dynasty Points are saved to your account.
- We verify a score by replaying the run. Your browser sends the record of what you pressed during the run; our server replays it to compute the score itself. That record is discarded once the score is verified. It is never published.
- We publish your bakery name and score on the weekly leaderboard, and your bakery name and cumulative points on the permanent Hall of Fame. Anyone can see these boards.
This data is stored with our hosting providers, Vercel and Upstash, in a database only our own server code can reach. A sign-in cookie keeps you signed in on the device you used; it holds nothing but a signed session reference.
Deleting it: your account page, at theslopworks.com/signin while signed in, has a delete-my-account option that removes your identifier, your email, name and photo or your username and password hash, your bakery name, every score, all podium trophies and Dynasty Points. This is permanent, and a deleted username can be taken by someone else. Finalized weeks are not awarded again after account deletion. You can also sign out there, which removes the cookie and nothing else.
What we do not do
- No advertising, and no advertising or tracking networks.
- We do not sell, rent or share your data with anyone, other than the hosting providers named above who store it for us.
- We do not build profiles, send email, or contact you.
Changes
If what we store ever changes, this page changes first, with a new effective date at the top.
Contact
Questions about this page can be sent to the support address shown on the Google sign-in screen for The Slop Works.
The Slop Works is an independent project, not a company. The only accounts on the site are the Google sign-in and username accounts described above, and you only need one if you choose to compete.