Last updated: September 20, 2026
This Privacy Policy explains how Slopscan (“Slopscan,” “we,” “us,” or “our”) collects, uses, and shares information when you use Slopscan (the “Service”). It should be read together with our Terms of Service and Cookie Policy.
1. Who we are
Slopscan operates the Service. For the purposes of applicable data protection law, Slopscan is the controller of the personal data described below.
2. What we collect
Account information. When you sign up, we collect your email address and, depending on how you sign in, information from Google (if you use Google sign-in) or a magic-link login record. If you sign up with a password, it is stored in hashed form.
What you submit for auditing. When you run an audit, we process the public URL or ZIP file you provide. This includes rendering the page, generating a screenshot and HTML snapshot, and extracting design-related signals (fonts, spacing, colors, layout structure, and similar computed data). If you upload a ZIP, we access its contents to run the audit.
Audit results. We store the findings, score, and any implementation prompt generated for your audit so you can access your audit history.
Payment information. Subscription payments are handled by Dodo Payments, our payment processor and merchant of record. We receive confirmation of your subscription status and transaction identifiers from Dodo; we do not receive or store your full card number.
Usage and analytics data. We use product analytics (PostHog) to understand how the Service is used — for example, which pages are visited and which features are used. This is routed through our own domain rather than a third-party analytics domain. We do not send the content of your website submissions, your screenshots, your uploaded files, your full audit reports, or payment details to our analytics provider. We do not use Google Analytics or advertising pixels.
Support communications. If you contact us, we retain that correspondence to respond to and track your request.
3. How we use this information
We use the information above to: operate and provide the Service; generate your audits; authenticate your account; process billing through Dodo Payments; maintain and improve the Service; provide customer support; detect and prevent abuse; and comply with legal obligations.
4. AI processing and subprocessors
Generating an audit involves sending relevant data to third-party AI processing providers — including a large language model provider (for context-aware design judgment) and a structured decision-model provider (for narrower, rule-based judgments derived from measured design signals, not full page content). These providers process your data solely to return a result to Slopscan; we do not use your submissions to train our own models, and our AI processing providers are contractually restricted from using API-submitted content to train their own models, consistent with their standard terms.
Our current subprocessors include:
- An AI language-model provider, for context-aware audit judgment
- A structured decision-model provider, for measurement-based audit checks
- Dodo Payments, for billing and payment processing
- PostHog, for first-party-routed product analytics
- Railway, for application hosting and data storage
We may update this list as our infrastructure changes; material changes will be reflected in an updated version of this policy.
5. Data storage and retention
Audit data (screenshots, HTML snapshots, uploaded ZIP contents, and findings) is stored on our hosting infrastructure for as long as your account remains active. You can request deletion of your account and associated audit data at any time by contacting hello@slopscan.app. Some information may be retained longer where required for legal, tax, or fraud-prevention purposes.
6. How we share information
We do not sell your personal data. We share information only with the subprocessors listed above (to the extent necessary to operate the Service), as required by law or legal process, or in connection with a merger, acquisition, or sale of assets (in which case we will notify you).
7. International data transfers
Depending on where you and our subprocessors are located, your information may be transferred to and processed in countries other than your own, including where our subprocessors host infrastructure (for example, the United States and the European Union). Where required, we rely on appropriate safeguards (such as standard contractual clauses) for these transfers.
8. Your rights
Depending on your location, you may have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. You can exercise most of these rights from Settings, or by contacting hello@slopscan.app. If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with its own data protection framework, you may have additional statutory rights and the right to lodge a complaint with your local data protection authority.
9. Cookies
We use cookies and similar technologies as described in our Cookie Policy.
10. Children’s privacy
The Service is not directed to individuals under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us at hello@slopscan.app and we will delete it.
11. Security
We take reasonable technical and organizational measures to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
12. Changes to this policy
We may update this Privacy Policy from time to time. If we make a material change, we will notify you (for example, by email or an in-app notice) before it takes effect.
13. Contact
Questions about this Privacy Policy, or requests relating to your personal data, can be sent to hello@slopscan.app.