Privacy Policy
Last updated: 16 September 2026. AI Slop Wars ("we") is a personal project operated by an individual, not a company. Contact: privacy@aislopwars.com.
What we collect
- Account details from the sign-in provider you choose (for example Google, GitHub, Discord or Microsoft): your name, email address, profile picture and which provider you used.
- Game data: commanders your AI drafts, the strategy text you type, which AI model you used, challenges you create or accept, match results and your win/loss record.
- Who invited you: if you joined by accepting a challenge link, we record which player's link brought you in.
- Marketing preference: whether you opted in to emails, and when.
- Technical data: standard request logs kept by our hosting provider (IP address, browser, timestamps).
AI connections and API keys
If you connect your own AI (OpenRouter, an API key, or a local model), your key or token is stored only in your browser's local storage. It is never saved on our server. Requests go from your browser directly to that provider. If a provider blocks browser requests, your request and key pass through our server only to reach that provider; we do not store or log either.
The strategy text you type is sent to the AI you connected. If you use the free house AI, it is sent to OpenRouter and the model provider serving Mistral Nemo. Those providers handle it under their own privacy policies.
How we use it
We may use the information we collect for any lawful purpose, including but not limited to:
- Running your account, matches, challenges and the leaderboard.
- Showing your first name and last initial, your commander and your AI model to people who view your challenges or the leaderboard.
- Analysing usage, measuring performance, and developing new features, products and services.
- Marketing and promotional purposes. If you tick the email box at sign-in, we may email you about new features, tournaments, prizes, research invitations and offers from partners. The box is ticked by default; clear it at sign-in if you do not want these. We record your preference either way, along with the time it was set. Every marketing email includes an unsubscribe link, and you can withdraw consent at any time by using it or by emailing us.
- Preventing abuse, such as overuse of the free house AI.
- Creating aggregated, anonymised or de-identified data. Once information is in that form it is no longer personal information, and we may use, publish, license or sell it for any purpose without restriction and without further notice to you.
Sharing and disclosure
We may disclose your information to service providers and subprocessors who work on our behalf, to analytics and advertising partners, and to any party where we believe disclosure is required by law, necessary to enforce our terms, or appropriate to protect our rights, safety or property.
We may also disclose or transfer your information, including as part of any merger, acquisition, financing, reorganisation, bankruptcy or sale of assets, in which case it would be subject to the acquirer's practices.
Where permitted by applicable law and by the terms of the sign-in provider you used, we may share or sell personal information as those terms are defined under that law. See "Retention and your choices" below for how to opt out. We do not sell or transfer data obtained through Google Sign-In except as permitted by the Google API Services User Data Policy, including its Limited Use requirements.
Who processes it
- Supabase — authentication and database, hosted on AWS in the United States (us-east-1).
- Cloudflare — hosting, request logs and anonymous event analytics.
- OpenRouter and the model provider behind the house AI — only if you use the house AI.
- Any AI provider you choose to connect, under their own terms.
We do not currently use an email provider, because we do not currently send email. If that changes we will update this page first.
Analytics
We count anonymous events so we can see which parts of the game people use — for example that a commander was drafted, or a challenge was created. We record the name of the step, one short detail such as which AI provider was chosen, the page it happened on, and the country your request came from.
These events use no cookies and carry no name, email, account id or device identifier, so they cannot be tied back to you or joined to your account. They are stored by Cloudflare on our behalf and used only to improve the game.
International transfers
Our infrastructure is in the United States. If you use the site from outside the US, your data is transferred to and processed there.
Retention and your choices
We keep your information for as long as we consider it necessary for the purposes described in this policy, or as required by law. You can delete your account, profile, challenges and match history at any time with "Delete my account" at the bottom of the site. Deletion removes the associated records from the live database. It does not reach provider backups, server logs, or any aggregated or de-identified data already derived from your activity, which we may retain and continue to use indefinitely.
To access or correct your data, or to unsubscribe, email privacy@aislopwars.com.
If you are in the EU or UK (GDPR / UK GDPR), you have the right to access, correct, delete, restrict or object to processing of your data, and to receive it in a portable form. Our legal basis is your consent for marketing, and legitimate interest or contractual necessity for running the game. You may complain to your local data protection authority.
If you are in California (CCPA / CPRA), you have the right to know what we collect, to delete it, to correct it, and to opt out of the sale or sharing of your personal information. To opt out, email privacy@aislopwars.com with the subject "Do Not Sell or Share". We honour Global Privacy Control signals where we are required to. We will not discriminate against you for exercising these rights.
Either way, the "Delete my account" button and the contact address above are how you exercise these rights.
Security
We take reasonable steps to protect your information, but no method of transmission or storage is completely secure. We cannot guarantee the security of your information and you provide it at your own risk.
Children
AI Slop Wars is not intended for anyone under 16. We do not knowingly collect their data. If you believe a child under 16 has an account, email us and we will delete it.
Changes
We may change this policy at any time and at our sole discretion. Changes take effect when posted here, and we will change the date above. Continuing to use AI Slop Wars after a change means you accept the updated policy. Where applicable law requires notice or fresh consent for a particular change, we will obtain it.