Privacy Policy //

Information we collect

• Account information. When you sign in (Google, GitHub, or email magic-link), our authentication provider gives us your email address and basic profile details (e.g. name and avatar where provided). You also choose a public site username.
• Content & usage. Cases and annotations you create, cloud-stored images you upload, and quiz activity (answers, scores, streaks, leaderboard standing).
• Billing. If you subscribe to Premium, our payment processor (Stripe) handles your payment. We receive your subscription status and customer ID — we never see or store your full card number.
• Technical data. Standard server logs (IP address, browser/device type, timestamps) and cookies as described below.

How we use your information

To provide and secure your account; to run the tagger, quiz, streaks, and leaderboard; to process Premium subscriptions; to display advertising to non-Premium users; to maintain and improve the service; and to comply with legal obligations.

Cookies & advertising

We use a small number of cookies that are necessary to keep you signed in. We do not run third-party product-analytics trackers.

We show ads to non-Premium users via Google AdSense. Google and its partners use cookies and similar technologies to serve and measure ads. If you are in the EEA, the UK, or Switzerland, you will be asked for your consent before personalized ads are shown, via Google’s consent message; you can decline, in which case you may still see non-personalized ads. You can change your choice at any time by clearing the consent prompt (it will reappear) and reselecting. Premium removes ads entirely.

Learn more about how Google uses information from sites that use its services at policies.google.com/technologies/partner-sites, and manage Google ad settings at adssettings.google.com.

Service providers

We share data only with the processors needed to run Slop Autopsy:

• Convex — application backend, database, and file storage.
• Better Auth — authentication, plus the sign-in providers you choose (Google, GitHub).
• Stripe — subscription payments.
• Google AdSense — advertising to non-Premium users.
• Resend — transactional email (e.g. magic-link sign-in).
• Vercel — website hosting and delivery.

We do not sell your personal information.

Legal bases (EEA/UK)

Where the GDPR or UK GDPR applies, we rely on: contract (to provide your account and subscription), legitimate interests (to secure and improve the service), consent (for personalized advertising cookies), and legal obligation where required.

Your rights

Depending on where you live, you may have the right to access, correct, delete, export, or restrict the processing of your personal data, to object to certain processing, and to withdraw consent. To exercise any of these, email support@slopautopsy.com. EEA/UK residents may also lodge a complaint with their local data protection authority.

Data retention

We keep your data for as long as your account is active. You may delete your account by contacting us, after which we delete or anonymize your personal data except where we must retain it for legal, security, or billing-record purposes.

Security & international transfers

We use reputable providers with industry-standard safeguards. Our providers may process data in the United States and other countries; where required, transfers rely on appropriate safeguards such as the providers’ standard contractual clauses.

Children

Slop Autopsy is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact support@slopautopsy.com and we will remove it.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above and, where appropriate, a notice in the app.

Contact

Questions or requests about this policy or your data: support@slopautopsy.com.