Privacy
Privacy policy.
- Effective
- August 24, 2026
- Last updated
- August 24, 2026
This policy is meant to give you a clear account of what happens to personal information when you visit Top Slop, join a game, contact us, or take part in a playtest.
It applies to topslop.ca, the game and related services at topslop.tv, and the supporting systems we operate for those services. Services such as Steam and social networks have their own privacy policies when you use them directly.
1. Who is responsible
Top Slop is the public name of 9574-5592 Québec inc., a Quebec company. The company is responsible for the personal information covered by this policy.
Victor Livernoche is our Privacy Officer. He oversees compliance, privacy requests, and complaints. His complete contact information appears in section 15.
2. What we collect and how
We collect information directly from you when you enter or upload it, automatically when your browser or device communicates with our services, from another player when their submission concerns you, and from providers acting for us.
Game and playtest information
- Display name, room code, host access information, selected language and game settings.
- Prompts, guesses, votes, edit instructions, feedback, and other text you choose to submit.
- Photos and reference images you choose to upload, along with images and captions created or edited during play. A photo may reveal faces or other personal details appearing in it.
- Scores, room state, game progress, session and reconnect identifiers, and the relationships among players, submissions, and votes within a room.
- Private-alpha activity such as selected games, round counts, player counts, play duration, skips, timeouts, disconnections, failures, and voluntary ratings or comments.
Website and communications
- Your email address, name, message, attachments, and any other information you provide when you contact us for support, press, business, security, legal, or privacy matters.
- The page and language version you request. The separate language preference saved by topslop.ca stays in your browser.
Technical and security information
- Internet Protocol address, request time, requested address, browser or device characteristics, network and diagnostic data, and security events ordinarily processed in server and provider logs.
- Signed host-access cookies, session and reconnect tokens, and locally stored sound, video, language, or playlist preferences.
- Pseudonymous alpha session, incident, and feedback identifiers. We do not require a permanent player account for ordinary room play.
Providing information is generally voluntary, but refusing information needed for a requested feature may prevent us from creating or reconnecting you to a room, processing an image, speaking a display name, granting alpha access, or answering a request. Do not submit information that is unnecessary for play, especially confidential or highly sensitive information about yourself or anyone else.
3. Why we use information
We identify the purposes before collecting personal information and limit collection, use, and access to what is reasonably necessary. We obtain consent where required and may also handle information without consent when the law permits or requires it.
- Create, host, coordinate, and restore game rooms and show each participant the information required by the game.
- Prepare uploads; generate, edit, moderate, store, and deliver game images; and generate spoken versions of display names.
- Authenticate private-alpha hosts and administer playtest access.
- Detect prohibited content, abuse, fraud, security threats, service failures, and violations of our rules.
- Measure reliability, diagnose problems, balance games, understand whether sessions complete successfully, and improve the player experience.
- Review voluntary feedback and communicate with playtest participants.
- Answer support, press, privacy, security, legal, and business messages.
- Comply with legal duties, enforce our agreements, establish or defend legal claims, and protect people, property, and the service.
4. Generative AI and automated processing
Some game modes use generative systems operated on Top Slop infrastructure or hosted for us by Modal. Depending on the mode, the system receives your prompt, game settings, and a photo, prior image, or edit instruction. It returns an image or other game result.
Before storage, uploaded photos are automatically resized, oriented, checked for disallowed content, and stripped of embedded EXIF metadata. Automated safeguards may reject an upload, block or repair a high-risk prompt, replace unsafe instructions, or flag an output. These actions affect the requested game feature, but we do not use automated processing to make decisions that have legal or similarly significant effects about you.
We do not use player photos, prompts, or submissions to train Top Slop’s own generative models. We use this content to provide and protect the requested service, troubleshoot limited samples as described in section 7, and comply with law.
If you believe an automated safeguard made a mistake, contact support@topslop.ca. You may provide the approximate time and room code, but do not resend sensitive content unless we ask for it through an appropriate channel.
5. Who receives information
Within Top Slop, access is limited to cofounders, developers, and support or professional personnel who need the information for the purposes in this policy. We may disclose information to the following recipients or categories.
| Recipient or category | Purpose | Information | Processing outside Quebec |
|---|---|---|---|
| Cloudflare | Website and game delivery, room coordination, database and image storage, security, and operational measurement | Requests, network data, room and alpha records, images, session identifiers, and diagnostics | Yes. Cloudflare operates a global network and processing may occur in Canada, the United States, and other countries. |
| Modal | Hosted image generation and upload preparation when that capacity is used | Prompts, settings, photos, reference or prior images, and generated results | Yes. Processing may occur in the United States or another location used by the provider. |
| ElevenLabs | Text-to-speech generation for spoken display names | Display name, language, and selected voice settings; generated audio | Yes. Processing may occur in the United States and other locations used by the provider. |
| Email, support, and professional-service providers | Deliver communications, manage requests, and obtain legal, security, accounting, or technical assistance | Contact details, messages, attachments, request records, and only the service data needed for the mandate | Possibly, depending on the provider engaged for the request. |
| Host and other players in your room | Play the shared game and display its results | Display name and the submissions, images, guesses, votes, scores, and results the game makes visible | Depends on where those participants are located. |
| Authorities, transaction parties, or other recipients permitted by law | Comply with law, respond to emergencies, protect rights and safety, or complete a financing, reorganization, sale, or similar transaction with appropriate safeguards | Only information reasonably necessary in the circumstances | Possibly, if the lawful recipient is outside Quebec. |
Providers process information for us under service terms or contracts. We assess privacy factors before communicating personal information outside Quebec when required. Information in another jurisdiction may be subject to that jurisdiction’s laws and lawful demands by its authorities.
ElevenLabs may retain text-to-speech inputs and outputs under its standard service settings. Top Slop is not currently using ElevenLabs’ enterprise zero-retention mode. See section 7 for the separate Top Slop audio cache.
6. What other players can see
Top Slop is a shared social game. The host and people in the same room may see your display name, submissions, uploaded or generated images, guesses, votes, scores, and game results when the rules call for them. A shared host screen is intended to be visible to everyone present.
Participants may independently photograph, record, copy, or share what appears on their own device or shared screen. Their conduct is outside Top Slop’s control. Use a non-identifying display name if you prefer, submit only content you are comfortable showing the group, and play with people you trust. Image addresses are hard to guess but may be viewed by anyone who receives the address until it expires.
7. How long we keep information
We use the retention periods below unless a longer period is reasonably necessary for a documented security incident, a legal obligation, or the establishment or defence of a legal claim. Once a period ends, we securely destroy the information or irreversibly anonymize it for legitimate analytical use.
| Information | Normal retention |
|---|---|
| Room state, display names, submissions, votes, scores, session and reconnect information | Until the room expires, ordinarily no more than 4 hours after creation. |
| Uploaded, generated, and edited game images | Available for no more than about 4 hours. Expired objects stop being served and are removed by an automated sweep; temporary delivery copies follow the same expiry. |
| Raw private-alpha debug samples, including sampled prompts, guesses, or edit instructions | Up to 30 days, followed by automated deletion. |
| Compact alpha session and game metrics, feedback, host-access records, and service-incident records not subject to the incident-register rule below | Up to 24 months after the relevant playtest or access ends. |
| Spoken-name audio cached by Top Slop | The cache has no automatic expiry. We retain it to avoid repeat synthesis requests, reduce latency and cost, and limit repeated transmission of the same display name to ElevenLabs. Its storage key is a one-way hash rather than a readable name. You may request deletion by providing the exact display name, approximate date, language, and voice if known. |
| Support, business, legal, security, and privacy correspondence | Up to 3 years after the matter closes, unless a shorter or longer period is appropriate to the nature of the request or required by law. |
| Confidentiality-incident register and records needed to document the response | At least 5 years after we become aware of the incident, as required in Quebec. |
| Network, security, and provider logs | According to the provider’s operational and security schedule and only as long as needed for the stated purpose. Contact us for the schedule applicable to a particular request. |
Deletion from active systems may be followed by a limited delay while protected backups cycle out. Anonymized aggregate information that can no longer identify a person is not subject to these periods.
8. Cookies and browser storage
topslop.ca does not set cookies and does not load advertising pixels, behavioural analytics, third-party fonts, or third-party embeds. It stores a language preference in your browser. That preference is not sent as a separate tracking identifier.
The private-alpha host service at topslop.tv uses a necessary signed, HTTP-only access cookie for up to 30 days. A player reconnect token is kept in that browser tab’s session storage. Sound, video, language, and saved-playlist preferences may remain in local storage until you clear them. These technologies provide requested functions and are not used for behavioural advertising.
Like most online services, our network and hosting provider automatically processes ordinary request and security logs. If we later add optional analytics, advertising, embedded-media tracking, or a similar technology, we will update this policy and implement any required consent before it operates.
9. What we do not do
- We do not sell or rent personal information.
- We do not use player content for third-party advertising or cross-site behavioural profiles.
- We do not use photos for facial recognition or biometric identification.
- We do not request your address book or collect precise device location.
- We do not require a permanent player account for ordinary room play.
- We do not make automated decisions that produce legal or similarly significant effects about players.
10. Children and photos of minors
The private alpha is intended for people aged 16 or older and is not directed to children. A person under 16 should not participate or submit personal information. In Quebec, personal information may not ordinarily be collected directly from a child under 14 without consent from a parent or tutor, unless the law provides otherwise.
Do not upload a minor’s photo or personal information unless you are authorized to do so, have any consent required by law, and the content is appropriate under our rules. A parent or tutor who believes a child provided information may contact the Privacy Officer to request review and deletion.
11. Your choices and privacy rights
Subject to applicable law, you may ask whether we hold personal information about you; obtain access to it; request correction; withdraw consent for future use where processing depends on consent; and ask us to delete information or stop disseminating or de-index it where the legal conditions are met. If information was collected from you electronically, you may also be entitled to receive it in a structured, commonly used technological format.
Send a request to privacy@topslop.ca. Explain what you are requesting and provide enough context to locate the information, such as the approximate date, room code, whether you were host or player, and the relevant display name. Because most room data disappears quickly and we do not maintain player accounts, we may no longer have it or may be unable to link it to you.
We may verify your identity using only information reasonably necessary for that purpose. We will normally respond to a Quebec access or correction request within 30 days after receiving it. If we deny all or part of a request, we will explain the legal reason and available recourse, subject to legal restrictions.
Withdrawing consent does not affect earlier lawful handling. It may prevent us from providing a feature that genuinely requires the information. You may complain to our Privacy Officer or to the Commission d’accès à l’information du Québec at cai.gouv.qc.ca. People outside Quebec may also contact the privacy authority where they live.
12. Safeguards and incidents
We use administrative, technical, physical, and contractual safeguards appropriate to the sensitivity, purpose, quantity, distribution, and storage medium of the information. Measures include limited internal access, signed access mechanisms, transport encryption, short room and image lifetimes, separation of operational records, removal of photo metadata, provider review, and monitoring for failures and abuse.
No service connected to the internet can be guaranteed completely secure. We assess suspected confidentiality incidents, take reasonable steps to reduce harm and prevent recurrence, maintain the legally required register, and notify affected people and the Commission d’accès à l’information when an incident presents a risk of serious injury, as required by law.
If you believe you found a vulnerability or confidentiality incident, contact security@topslop.ca. Do not access, copy, retain, or disclose other people’s information beyond what is strictly necessary to report the issue.
13. Privacy governance and complaints
Our privacy governance includes defined roles, limits on access and retention, procedures for requests and incidents, review of providers, and privacy assessment for material new systems or transfers where required. Personnel with access are expected to protect confidentiality and use information only for an authorized purpose.
The Privacy Officer receives complaints, gathers the relevant facts, consults the people responsible for the service, and communicates the outcome and any corrective measures that can be disclosed. We handle complaints fairly and do not penalize a person for raising a privacy concern in good faith.
14. Changes to this policy
We may update this policy when our services, practices, providers, or legal duties change. We will publish the revised policy with its new update date and give appropriate notice of material changes. If a change requires new consent for information already collected, we will seek it before applying the new use. You may request a prior version from the Privacy Officer.
15. Contact the Privacy Officer
Victor Livernoche, Privacy Officer
Top Slop — 9574-5592 Québec inc.
privacy@topslop.ca
936 avenue du Mont-Royal Est, Montréal (Québec) H2J 1X2, Canada