Privacy Policy

Effective date: September 14, 2026.

Who we are and how to contact us

Stop Slop is operated by Hichem Benzair. Our privacy contact is Hichem Benzair, Person responsible for the protection of personal information, reachable at stopslopapp@gmail.com. This policy covers the Stop Slop app, these pages, and requests you send to us.

Information on your device

Stop Slop stores XP, streaks, scores, saved games, recent-question histories, Free play allowances, introductory access records, game preferences, and cached Premium status on your device. These records support gameplay, resuming games, content rotation, and access limits. Session identifiers are generated locally. Historical Figure records from earlier introductory access may remain saved; a current Premium entitlement is required to resume that standalone game.

There is no Stop Slop login or account-based gameplay backup or synchronization service. The app does not upload your answers, scores, or progress to a developer-operated gameplay server. Device backups may contain app data according to your device settings.

Party Tilt requests motion access when needed and processes device-motion readings locally to interpret game actions. Its on-screen Pass and Correct buttons are also available. Screen transitions can create temporary images of the app interface locally; these are not photos from your library and are not uploaded by the app.

Subscriptions, RevenueCat, and Apple

We use RevenueCat to validate purchases, retrieve subscription status, restore eligible purchases, and determine Premium access. It also provides subscription analytics. The subscription SDK initializes when the app starts, including for Free users; network requests are not limited to people who buy Premium.

The RevenueCat SDK generates an anonymous App User ID and associates it with subscription and transaction information. Stop Slop does not supply a custom account ID, name, or email to that SDK. An anonymous ID is still an identifier; it does not mean no personal information is processed.

Subscription requests include app and device context, such as app/build and SDK versions, operating system, device model, preferred locales, and storefront when available. The installed iOS SDK also sends Apple's identifier for vendor (IDFV) in a request header when available. Requests reach RevenueCat's servers, which receive network information needed to communicate with your device.

RevenueCat has confirmed, for Stop Slop's exact configuration, that this processing is Purchase History collected for app functionality and subscription analytics, is not linked to your identity, and is not used for tracking. RevenueCat generates the anonymous App User ID as a random identifier; it is cached on your device, and reinstalling the app creates a new one. Restoring purchases can associate more than one anonymous identifier with the same underlying RevenueCat record. RevenueCat has also confirmed that it does not store Apple's identifier for vendor (IDFV) as part of your subscriber record unless we explicitly instruct the SDK to collect it — we do not; the request header mentioned above is separate, transient request information, not something stored on your RevenueCat profile.

RevenueCat's published privacy policy states that it stores the personal data it processes in the United States, and generally retains it — according to its own published privacy, contractual, operational, security, and legal requirements — for as long as you have an active relationship with the service and for a further period after that to help resolve any issues. Some granular retention periods, such as individual request or log records, are not publicly specified by RevenueCat, and Stop Slop does not control RevenueCat's internal operational log-retention schedule. Its data processing agreement describes the additional service providers it may use to provide its service, and states that international transfers of personal data are supported by contractual safeguards such as Standard Contractual Clauses. We have assessed this processing, including its transfer outside Canada, through our own internal privacy-impact review process; see "Processing outside Québec and Canada" below.

Apple handles payment through the App Store. Stop Slop does not directly receive or store payment-card numbers or CVV. The app receives purchase/subscription status and product information through RevenueCat and Apple's purchase services. Apple's billing records follow Apple's applicable practices.

See Apple's Privacy Policy and RevenueCat's Privacy Policy. RevenueCat's app-user processing is also governed by its agreements with the app operator; its website privacy policy alone does not describe every aspect of that processing.

Minimization, analytics, and permissions

You do not need to provide a name, email, or telephone number to play. Stop Slop does not use an advertising SDK or a dedicated remote gameplay analytics or crash-reporting SDK. It does not implement advertising tracking or IDFA collection. No additional RevenueCat integrations are active in the release configuration.

The app does not request access to your contacts, camera, microphone, photo library, location, or notifications. Development builds log gameplay and motion events locally. Some local haptic error warnings may also occur outside development builds. There is no app-operated remote destination for those console logs.

Support and this website

If you contact support at stopslopapp@gmail.com, we receive your sender address and the information you choose to send, and use it to respond to your request. That mailbox is provided by Gmail; Google's handling of the message is subject to Google's own practices. Send only what is needed to explain the issue. Do not send passwords, card numbers, CVV, or unrelated personal information. Support correspondence is retained only as long as reasonably necessary to respond to your request, maintain appropriate support/compliance records, and satisfy applicable legal obligations; we do not keep it for a fixed, predetermined period.

These pages use no analytics scripts, advertising, forms, or application cookies. This website is hosted on Cloudflare Pages. Opening a page sends a request that Cloudflare, our hosting provider, processes to deliver, secure, and operate the site — this can include standard web request metadata such as your IP address, browser/request information, and security-related request metadata. This is a normal function of how any website is served over the internet, not an analytics or tracking feature added by Stop Slop. External links open the named provider's website and are subject to its own practices.

Cloudflare's published privacy policy states that it primarily stores information in the United States and the European Economic Area, and that by default it does not keep long-term records of ordinary website request logs beyond what is needed to operate the service. Other Cloudflare records may be retained according to its published policies, operational needs, and applicable legal obligations. We have assessed this processing, including its transfer outside Canada, through our own internal privacy-impact review process; see "Processing outside Québec and Canada" below.

Retention and deletion

Local records remain until they are changed, replaced, or cleared by the app's storage lifecycle, or app data is removed. Different records have different lifecycles; a daily allowance reset does not necessarily erase older stored bytes at midnight. Recent-question histories are bounded. There is no user-facing global erase/export control in this release.

Deleting the app and its data may remove local progress. Offloading the app is different from deleting its data, and backups or restored devices may retain records. Contact support before reinstalling as a troubleshooting step. Restoring purchases restores eligible subscription access, not local gameplay progress.

Removing app data does not cancel an Apple subscription or delete Apple or RevenueCat records. Use Apple's subscription settings to cancel. Contact our privacy contact to request help with provider-held information. We cannot retrieve local-only gameplay records remotely.

RevenueCat has confirmed it can delete your RevenueCat record, including purchase history, on request, and that doing so is sufficient to satisfy a data-erasure request for the information RevenueCat holds. Because Stop Slop does not use accounts, we do not automatically know which RevenueCat record is yours. To help us find and delete the correct one, Stop Slop provides a Privacy Request ID: an anonymous subscription/customer reference you can find on any Premium screen, near the Privacy Policy, Terms of Use and Support links. Tap Show ID to reveal it, then Copy ID to copy the full value. The app does not transmit this ID anywhere automatically — you choose whether and when to share it, for example by including it in a privacy or deletion request you send to stopslopapp@gmail.com. Do not post this ID publicly, such as in a review, forum, or social media post; treat it like any other account reference.

RevenueCat retains subscriber records according to its own published privacy, contractual, operational, security, and legal requirements. The exact default retention period before an explicit deletion request is not publicly specified for every category of record, and Stop Slop does not control RevenueCat's internal retention schedule; requesting deletion using the Privacy Request ID above remains available regardless. Support correspondence retention is described above; identity-verification proportionality and response-time commitments for privacy/deletion requests are described under Your privacy rights and complaints, below.

Processing outside Québec and Canada

A Canada-only launch does not mean all information is processed in Canada. RevenueCat (subscription and Premium functionality) and Cloudflare (hosting these pages) may process information outside Québec or Canada, including in the United States, where different privacy laws may apply. Both providers publish agreements describing contractual and security safeguards for the information they process, including limits on how it may be used, confidentiality and security commitments, and defined processes for further service providers they rely on. Publishing these safeguards does not by itself mean a transfer meets every applicable legal requirement. Before communicating personal information outside Québec, Québec law requires weighing factors such as the sensitivity and amount of information involved, its purpose, and the protection these safeguards provide.

Stop Slop has assessed these transfers through its own internal privacy-impact (EFVP) review process, considering the sensitivity and amount of information involved, its purpose, and the contractual, organizational, and security safeguards each provider publishes. Information processed abroad may be subject to the laws of the country where it is processed, which can differ from Québec's or Canada's. This assessment is reviewed periodically as our providers or practices change.

Security

Gameplay records use the app's local device storage. Subscription functionality relies on Apple and RevenueCat services. Protect your device and avoid sending sensitive information in support requests. No storage or transmission method is completely secure.

Children

Stop Slop is a general-audience app and is not offered in Apple's Kids Category. It does not ask for a player's age or require an account. A parent or guardian with a concern about information provided by a child can contact our privacy contact. Applicable protections for children still apply.

Your privacy rights and complaints

Depending on the applicable law, you may request access to or correction of personal information and information about how it is used or disclosed. Québec and Canadian law may provide rights to withdraw consent, subject to applicable limits; Québec law also provides portability rights in specified circumstances. Contact us at stopslopapp@gmail.com to make a request or complaint.

We use data-minimizing, proportionate verification. For a request about your RevenueCat subscription information, your in-app Privacy Request ID (described above) is normally the information we use to locate the correct record. We do not routinely ask for government identification, your Apple Account credentials, card information, CVV, full receipts, or unrelated personal information. We may ask for a limited amount of additional information only when reasonably necessary to verify or complete a particular request; how much we ask for depends on the sensitivity of the information involved and the nature of the request. A Privacy Request ID will not necessarily be sufficient to resolve every possible request.

For requests governed by Québec's private-sector privacy law, we aim to respond to access and rectification requests within 30 days of receipt, consistent with that law's requirement (Act respecting the protection of personal information in the private sector, s. 32). If we do not respond within that period, the request is treated as refused, and you may pursue the recourse described below.

If you submit a privacy complaint in writing to stopslopapp@gmail.com, Hichem Benzair, Person responsible for the protection of personal information, receives and handles it. We keep an internal record of complaints containing only what is reasonably needed — such as the date received, the nature of the request, relevant correspondence and actions taken, the decision or outcome, and the date closed. We retain that record only as long as reasonably necessary to handle the matter, maintain appropriate accountability/compliance records, and satisfy applicable legal obligations; we do not keep it for a fixed, predetermined period.

Where the GDPR applies, rights may include access, rectification, erasure, restriction, portability, objection, withdrawal of consent where processing relies on consent, and a complaint to a supervisory authority. These rights are subject to legal conditions. A Canada-only release does not, by itself, determine GDPR applicability.

If you are not satisfied with our response, you may have recourse to the Commission d'accès à l'information du Québec, the Office of the Privacy Commissioner of Canada, or another competent privacy authority. This is general information about available recourse, not legal advice.

Québec's private-sector privacy law applies to Stop Slop's Québec private-sector activities, where applicable. Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) may additionally apply to certain interprovincial or international commercial activities, where applicable. Where the GDPR applies, the rights described above apply to you; describing those rights here does not, by itself, mean the GDPR applies. The applicable legal basis for a specific instance of processing depends on the law and activity involved.

Updates

We may revise this policy as our practices change. We will publish the revised policy with its effective date and provide any additional notice required by applicable law.