Privacy Policy

SlapTopia

Last updated: 19 August 2026

This document was drafted by an agent and is not legal advice. Every statement in it describes what the build actually does today, but a lawyer should read it before it is submitted to an app store.

Recent changes. Section 7 describes limited product analytics added on 2026-08-19. We do not record sessions, keystrokes, form contents, phone numbers, email addresses, or accelerometer readings in analytics.

Section 8 describes an optional SMS signup, live since 2026-08-16 and now offered in the game as well as on the home page. Numbers are being collected; no text message has been sent yet, because carrier registration is not complete.

Section 9 describes buying worlds, which is built but not yet switched on. Nothing is charging anyone today. Nothing about the game requires giving us a number, and buying is never required to reach any world.

The short version

SlapTopia is operated by Blacktop Social LLC. It has no accounts and no passwords — there is nothing to log in to. We use limited product analytics to understand visits, game progress, optional signup conversion, and purchases. We do not use session replay, advertising, ad trackers, or behavioral autocapture. We never ask for your real name, your location, your contacts, your photos, or your microphone.

Four things are optional, and none is ever required to play: you can give us an email address to be told when a new world opens (section 8), you can add a phone number to be texted as well (section 9), if you buy a world Stripe collects an email address so we can send your receipt and restore code (section 10), and the separate 18+ SPICY site has optional fields for an email address and a phone number so we can tell you if it opens (section 11). Skip all of them and we hold a random browser id, limited product-usage events, and whatever you put on the leaderboard.

When you finish a run, the display name you typed, your score, and the force numbers from that run leave your device and are published on a public leaderboard. Separately, the product analytics described in section 7 record selected actions such as viewing a page, starting or finishing a run, opening an offer, or completing a purchase. Analytics events never contain your phone number, email address, payment details, typed name, or raw accelerometer readings.

If you play on a Mac with the optional slapd helper, it reads your laptop's built-in accelerometer. That sensor data never leaves your machine — it travels from the helper to the game on your own computer and is never sent to us or to anyone else.

What we collect, and why

1. Your display name

You choose it. You type it into the game before your first run and you can change it at any time.

• We do not verify it, and we do not want it to be your legal name.
• It is stored on our server alongside your score and is shown publicly on the global leaderboard and on any challenge link you share.
• It is limited in length and stripped of characters that would break the board.

Do not use your real name, your email address, or anything else you would not want published. It is a leaderboard handle.

2. A random per-browser identifier (cid)

The first time you play, the game generates a random identifier — a UUID — and keeps it in your browser's localStorage.

• It is generated on your device, at random. It is not derived from your hardware, your network, your account, or anything about you.
• It lets the leaderboard recognise a returning player as the same row, so your personal best replaces your previous best instead of adding another line. It is also the pseudonymous player identifier used for product analytics and purchase entitlements.
• It is not derived from your identity and is not sent to PostHog with your phone number, email address, or payment details.
• Clearing your browser storage destroys it. You then appear on the board as a new player, and the old row stays behind under the old name and score.

3. Scores and force numbers

When a run ends, the game sends your score and the average and peak force of that run (in g) to the leaderboard, keyed to your cid.

The force numbers exist because the game measures how hard you hit — deliberately without rewarding it — and reports it back to you and to anyone you share a score card with.

4. Game data kept primarily on your device

The following live in your browser's localStorage. The game sends selected facts about progress — for example, run count, world, offer eligibility, and unlocks — as product-analytics event properties, but it does not send the contents of local storage wholesale:

• your best score and best recorded force
• your daily streak
• your per-world progress and which worlds you have unlocked
• your entitlements (which paid or granted worlds you own)
• your display name (a local copy, so you don't retype it)
• whether you dismissed the "add to home screen" prompt
• which world you last played

All of these are namespaced slaptopia.*. Clearing your browser data deletes them, permanently and irreversibly — there is no cloud backup of your progress, because there is no account to back it up to.

5. The accelerometer, on Mac only (slapd)

slapd is an optional command-line helper you install yourself. It reads the Sudden Motion Sensor built into Apple laptops so that physically slapping the machine flaps your citizen.

• It streams impact events to the game over a local connection on your own computer.
• It transmits nothing off the machine — no sensor readings, no impact data, no telemetry of any kind.
• It has no network access to us. It never contacts our servers.

6. Rate limiting

To stop a script filling the leaderboard, the server counts how many scores a given cid has posted today. That counter is keyed to the random identifier and to the date, and it is short-lived.

7. Product analytics

We use PostHog Cloud US to understand whether the landing page and game work: how many people visit, whether a visit is new or returning, which SlapTopia link brought them into the game, where players leave the onboarding and phone-signup funnels, which worlds and offers they reach, and whether a Stripe checkout is completed.

• We send deliberately named events such as page viewed, call-to-action clicked, game started, game finished, name prompt viewed or skipped, slap controls allowed, citizen discovered, phone offer viewed or completed, shop opened, checkout created, and purchase completed. Events may include the world, bundle, score, run count, referrer or campaign tags, entry source, browser/device metadata, and a random identifier.
• PostHog uses a cookie and browser localStorage so a visit to slaptopia.com can be recognised as the same journey on play.slaptopia.com. That identifier is limited to the SlapTopia domain; we do not use it to follow you across unrelated websites or apps.
• We have disabled session replay and automatic click/form capture. PostHog does not receive recordings, keystrokes, form contents, raw phone numbers, email addresses, card details, restore codes, or raw accelerometer readings from us.
• A successful phone signup is recorded only as a completed conversion tied to a random analytics identifier. The number itself stays in Supabase under section 8 and is not included in the PostHog event.
• A successful purchase is recorded with the bundle and amount, not the buyer's email address or card details.
• PostHog processes this data for us in the United States under its privacy policy: https://posthog.com/privacy.

We use this data to improve SlapTopia, diagnose conversion problems, and decide which product experiences are useful. We do not use it for advertising and do not sell it.

8. Email, if you ask us to tell you about new worlds

The game has an optional signup on its results screen, after you have finished a

few runs. It asks for an email address. It is never required to play —

skipping it leaves every world playable, earnable, and buyable on exactly the

same terms — and signing up may grant optional free trial runs.

• We store your email address, the date and time, **which surface

collected it, the IP address** the signup came from, your browser's

user-agent string, and the game's random browser id if the signup carried

one — that id is what lets the reminder below quote your own leaderboard

best instead of guessing.

• We use it to tell you when a new world opens, and at most once, about a

week after you sign up, to remind you of free trial runs you have not spent.

That is the whole programme. It is not a newsletter, there is no drip

sequence, and we do not email you about anything we have not made.

• Every email carries a working unsubscribe link, and pressing it stops us

immediately. You never have to reply, log in, or give us anything else to use

it. We keep a record that the address opted out, because deleting it entirely

would mean we could not reliably keep from emailing you again. Ask us and we

will delete that too.

• Delivery is by Resend, our service provider

(https://resend.com/legal/privacy-policy). The address itself is stored in

Supabase in the United States.

• We never sell it, and we never share it for anyone else's marketing. This

list is kept separately from the SPICY list in section 11 and from the buyer

records in section 10; none of the three feeds any of the others.

9. SMS notifications, if you ask for them

SlapTopia has an optional signup that texts you when we release something new. It appears in two places: on the slaptopia.com home page, and beside the email field described in section 8 on the game's own results screen, where the number is the optional extra and the email address is the ask. Neither one is ever required to play; skipping it leaves every world playable, earnable, and buyable on the same terms. Signing up may grant optional free trial runs. It went live on 2026-08-16. We have not sent any message yet — carrier registration is still in progress — so if you sign up today, your number is recorded and nothing is sent until that finishes.

The sender is Blacktop Social LLC, not SlapTopia. SlapTopia is one of the things we make. When you tick that box you are joining Blacktop Social's launch list, and we may text you about our other products and releases as well as this one — that is what the words next to the checkbox say, and we do not read them more broadly than they read. We record which of our sites you signed up from, so we know the list is one list without pretending your consent came from somewhere it did not.

Only if you enter your number and tick the consent box:

• We store your phone number, the date and time you consented, the exact wording you agreed to and its version, which site collected it, the IP address the signup came from, and your browser's user-agent string. We keep that record because proving what you agreed to, and when, is the entire point of it.
• We use it to send you recurring promotional text messages from Blacktop Social LLC — product launches, releases, updates, offers. Nothing else. We do not text on behalf of anyone else.
• Message frequency varies. Msg & data rates may apply. Reply STOP to any message to unsubscribe, or HELP for help.
• Your number and consent record are stored in Supabase (a hosted Postgres database) in the United States, separately from the game's leaderboard (https://supabase.com/privacy). Messages are delivered through Twilio, which processes your number on our behalf as our service provider (https://www.twilio.com/en-us/legal/privacy). Your carrier also sees the message, as carriers do. Those two, plus our host, are the only companies that ever touch it.
• Mobile phone numbers, SMS opt-in data, and messaging consent will not be shared, sold, or provided to third parties or affiliates for their marketing or promotional purposes. There is no arrangement under which we could. This does not stop Twilio from processing your number for us as our service provider; it means your consent itself is never handed to anyone else.
• When you unsubscribe we stop immediately. We keep a record that the number opted out — deleting it entirely would mean we could not reliably keep from texting you again. Ask us and we will delete everything, understanding that this removes the suppression record too.

10. If you buy something

Some worlds can be bought. Buying is never required — every world for sale can also be earned by playing — and if you never buy anything, none of this applies to you.

• Payment is taken by Stripe. Your card details go to Stripe and never to us: we do not see, store, or process them (https://stripe.com/privacy).
• From a completed purchase we keep the email address you gave Stripe at checkout, what you bought, the amount, Stripe's identifiers for the payment, and a restore code we generate for you. We keep the browser identifiers (cid) of the devices you have restored that purchase to, so the worlds appear on them.
• The email address is used by Stripe for your payment receipt, by us to email you your restore code so a cleared browser cannot cost you what you paid for, and for support about that purchase. The address is not added to any marketing list. Buying something does not sign you up for texts or email; sections 8 and 9 are separate, independent choices.
• That record lives in the same Supabase database as the SMS consent records, in the United States, and is kept as long as the purchase is valid — because it is the proof you bought it, and deleting it would delete your ability to restore it.
• Ask us to delete it and we will, understanding that this ends your ability to restore that purchase on any new device.

11. The SPICY launch list, if you ask for it

SPICY is a separate 18+ world on its own site, and it is not for sale. That page can collect an email address, and optionally a phone number — both only if you type them in.

• For the email address we store the address, the date and time, which site collected it, the IP address the signup came from, and your browser's user-agent string. We use it for one announcement: to tell you if and when SPICY opens. It is not a newsletter and there is no drip sequence behind it. Delivery is by Resend, our service provider (https://resend.com/legal/privacy-policy).
• The phone number is optional, and giving it joins the SMS program described in section 9 — same sender, same consent wording, same STOP/HELP, same record. Everything in section 9 applies to it, including that mobile numbers, SMS opt-in data and messaging consent are never shared, sold, or provided to third parties or affiliates for their marketing. The consent box ships unchecked and the number is refused without it.
• We record that it came from the SPICY page, under its own source, separately from numbers given on the home page or in the game. That is what lets one list be treated as more than one thing.
• Both live in the same Supabase database as everything else here, in the United States. We never sell either, or share either for anyone else's marketing.
• Reply STOP to any text, unsubscribe from any email, or write to support@blacktop.social and we will delete it.

12. What our service providers see

The game is served by Vercel, its leaderboard is stored in Upstash Redis, analytics are processed by PostHog, and SMS signups, purchase records, and SPICY launch-list addresses are stored in Supabase. Payments are taken by Stripe, and email is delivered by Resend. Like every website on the internet, requests to those services carry your IP address and your browser's user-agent string as an ordinary part of how HTTP works. Those providers may log them for operational and security purposes under their own policies:

• Vercel — https://vercel.com/legal/privacy-policy
• Upstash — https://upstash.com/trust/privacy.pdf
• Supabase — https://supabase.com/privacy
• Stripe — https://stripe.com/privacy
• Resend — https://resend.com/legal/privacy-policy
• PostHog — https://posthog.com/privacy

We do not use those logs, join them to your cid, or build any profile from them.

What we do not collect

To be explicit, because the absence is the whole point:

• No accounts and no passwords — there is nothing to log in to, and there never will be.
• No email address unless you give us one. Three separate things can ask: the optional in-game signup (section 8), Stripe at checkout if you buy something (section 10), and the 18+ SPICY page (section 11). Each is a distinct list with a distinct purpose, none feeds another, and a checkout address is never added to a marketing list.
• No phone number, unless you type one into the optional SMS signup described in section 9. It is offered on the home page, beside the email field on the game's results screen, and on the 18+ SPICY page (section 11). Playing and purchasing are never gated behind giving us one — signing up can unlock optional free bonuses in the game, but everything playable and buyable stays playable and buyable without it.
• No advertising, no ad identifiers, no ad networks.
• No advertising trackers, social pixels, or social widgets. PostHog is used only for the product analytics described in section 7.
• No session replay, keystroke capture, form-content capture, or automatic click capture.
• No tracking across unrelated websites or apps. One analytics cookie connects the SlapTopia landing and game subdomains as one journey.
• No location, no contacts, no photos, no microphone, no camera.
• No cross-site or cross-app tracking of any kind.
• No sale or sharing of personal data with data brokers. We do not sell your data. There is no arrangement under which we could.

Where the data lives, and for how long

The leaderboard is all-time by design. A board that quietly deleted itself would not be one.

Your choices and your rights

• Change your name. Type a new one. It replaces the old one on the board the next time you post a score.
• Stop appearing on the board. Don't finish runs, or clear your browser storage — a new random cid posts as a new player.
• Delete your row. We hold no email address for you, so we cannot identify your row on our own. Contact us at support@blacktop.social with the score and display name shown on the board, or with your cid (visible in your browser's localStorage under slaptopia.cid), and we will delete it.
• Get a copy of what we hold. Same route. It will be one row: a name, a score, and a random identifier.
• Delete or export analytics tied to your browser. Send us the slaptopia.cid value from browser storage. We can use that random id to locate the matching PostHog person and events.
• Delete everything local. Clearing site data in your browser removes every slaptopia.* key. Uninstalling slapd removes the accelerometer helper.

Depending on where you live you may have further rights under the GDPR, the UK GDPR, the CCPA/CPRA, or comparable law. Our lawful basis for publishing a name and a score is your consent, given by typing a name and finishing a run; you can withdraw it by asking us to delete the row.

Children

SlapTopia is not directed at children under 13, and we do not knowingly collect personal information from them. We collect no information that would let us determine a player's age. If you believe a child has published a name on the leaderboard, contact us and we will remove it.

Security, honestly stated

Traffic is encrypted in transit (HTTPS). The leaderboard is stored with a managed provider using access-controlled credentials.

We also want to be straightforward about the limits: the game is client-authoritative, so scores are not cryptographically verified, and the leaderboard should be read as a scoreboard rather than a record book. This does not affect your privacy — no additional information is collected as a result — but you should not treat the board as an authenticated record of anything.

Changes to this policy

If this policy changes materially, the "last updated" date at the top changes with it, and the current version is always the one served at this URL.

Contact

support@blacktop.social

Blacktop Social LLC.

This policy is governed by the laws of the State of New York, United States.