slopxrayLog in

Draft — to be reviewed before launch.

Privacy Policy

Last updated: September 22, 2026

slopxray (“we”, “us”) runs slopxray.com, a service that scores how much of a text is substance. This policy explains what we process, why, with whom, and for how long. Questions: [email protected].

Texts you check

  • To analyze a text we send it to OpenAI through their API. OpenAI processes it on our behalf; under OpenAI’s API terms, API data is not used to train their models by default and may be retained by OpenAI for up to 30 days for abuse monitoring.
  • Texts of checks made without an account are deleted after 24 hours. Texts of signed-in users are kept while the check exists.
  • The result (score, sentence labels, the one-line gist and the reasons) is kept until its share link expires: 30 days, or 365 days for paid accounts.
  • Don’t submit sensitive personal data or confidential material you may not share.

Share links

Every check gets a link. By default it shows the score, verdict, one-line gist, reasons and date, but not your text. Anyone with the link can open it. You can ask us to delete a link at any time.

Account data

If you sign up we store your email address and name, and your profile picture if you sign in with Google. For security we keep session records, including IP address and browser user agent.

Abuse protection

  • A cookie with a random device id (sx_anon) lets us offer one free check per device.
  • Your IP address, as passed to us by Cloudflare, is used for rate limiting and stored only as a keyed hash.
  • Cloudflare Turnstile checks that anonymous checks are made by humans.

Analytics

We use PostHog (EU cloud) without cookies or local storage to count events such as “check completed” with the score and verdict. The text itself is never sent to analytics.

Service providers

  • OpenAI — text analysis (United States)
  • Cloudflare — hosting network, security, Turnstile
  • PostHog — product analytics (EU)
  • Resend — sign-in emails
  • Google — sign-in with Google
  • Stripe — payments, when paid plans are available; we never see card details

Where data leaves the EU/EEA, transfers rely on the providers’ standard contractual clauses or an adequacy decision.

Legal bases

We process data to provide the service you request (contract), to keep it secure and improve it (legitimate interests), and where required, with your consent.

Cookies

We only use cookies needed to run the service: your login session, the device id above and your theme preference. No advertising cookies.

Your rights

You can ask for access to, correction, deletion or export of your data, and object to processing, by writing to [email protected]. You may also complain to your data protection authority. You can delete your account in the account settings.

Changes

We’ll update this page when things change and adjust the date above.