Privacy policy

1. Who we are

SlopTime is operated by WE KNOW HOW TO DO IT LTD, trading as SlopTime ("SlopTime", "we", "us" or "our"). We are the controller of the personal information described in this policy, except where a provider acts as a separate controller under its own terms.

Privacy questions and requests can be sent to adrian@weknowhowtodoit.com.

2. Information involved when you use SlopTime

Information you provide

• Your display name. It is stored in your browser and sent as part of a call so the character can address you.
• Call content. This includes your microphone audio, a live transcription of what you say, the AI character's replies, and any visual changes you request. Please do not share information that is confidential or especially sensitive.
• BYOK API keys. If you choose "My own keys", your OpenAI and fal keys are stored in your browser. They are sent through our server only when needed to request the relevant provider service. We do not save them in our database or include them in application diagnostics.
• Support communications. If you email us, we receive your email address and whatever you include in your message.

Paid purchases and credits

Stripe collects and processes your payment details on its hosted checkout. We do not receive or store your full card number. We receive transaction details such as your receipt email, Stripe checkout and payment identifiers, package, amount, currency, payment status, dates, and the anonymous browser ID used to credit your purchase.

Recordings

Paid calls are recorded in your browser and uploaded for you to watch, download, or share. A recording contains the character video and audio plus your microphone audio. It is linked to your anonymous browser ID and assigned a random public share link. Anyone who receives that link can view the recording, so only share it with people you trust. You can delete a recording from Your calls before it expires. BYOK calls are not recorded or stored by SlopTime.

Technical information

We and our hosting providers may process your IP address, request date and time, browser and device information, requested URL, response status, and security or error information. SlopTime also uses a random anonymous browser ID for paid balances and recordings. We use IP addresses for short-lived rate limiting and do not use them to build advertising profiles.

3. Why we use information

SlopTime does not make solely automated decisions about you that produce legal or similarly significant effects. The AI-generated conversation is entertainment output, not a decision about your rights or eligibility.

4. Who receives information

We use the following providers only where needed to deliver and protect SlopTime:

• Stripe for checkout, payment processing, receipts, fraud prevention, refunds, and disputes.
• OpenAI for the live voice conversation, transcription, and character replies.
• fal and its model infrastructure, including MiniMax H3 Max, for generating character videos. fal receives character imagery, generated dialogue, and relevant visual instructions, not your raw microphone audio from us.
• Upstash for the anonymous credit balance, purchase ledger, recording index, rate limits, and live line availability.
• Cloudflare R2 for private storage of paid call recordings.
• Vercel for website hosting, delivery, and infrastructure logs.

We may also disclose information to professional advisers, insurers, courts, regulators, or law enforcement where reasonably necessary to comply with law or protect rights and safety; or to a buyer if the business is reorganised or sold, subject to appropriate confidentiality protections.

We do not sell or rent personal information, and we do not share it for targeted advertising. When you choose to share a recording link, that disclosure is at your direction.

5. How long we keep information

• Paid call recordings and share links: 30 days from creation, or until you delete them sooner.
• SlopTime call transcripts: we do not intentionally persist them after the live call. Providers may retain API content and logs under their own policies; OpenAI states that Realtime API abuse-monitoring logs may be kept for up to 30 days by default.
• Purchase and accounting records: normally six years after the end of the financial year to which they relate, and longer where law, an audit, a dispute, or a regulatory enquiry requires it.
• Anonymous credit records: while you have a balance and afterwards only for as long as reasonably needed to reconcile purchases, prevent fraud, handle support, or meet legal obligations.
• Application rate-limit records: up to one hour. Hosting and security logs are retained according to provider settings and only as long as reasonably necessary.
• Support emails: for as long as needed to resolve the request and maintain an appropriate record of the issue.

Backup copies may remain for a limited period until overwritten. We may retain information longer where required by law or needed for a legal claim, and may retain information that has been irreversibly anonymised.

6. Cookies and browser storage

SlopTime does not currently use advertising or analytics cookies. It uses the following storage needed to provide the choices and features you request:

Clearing site data removes these items. Because there is no account, clearing the anonymous ID can also remove this browser's access to unused credits and saved calls; keep your Stripe receipt in case you need help. Stripe may use its own cookies and storage on its hosted checkout under its policy.

7. International transfers

Some providers process information in the United States and other countries outside the UK. Where UK data protection law requires it, we rely on applicable transfer safeguards made available under our arrangements with those providers. These may include adequacy regulations, the UK International Data Transfer Agreement, or the UK Addendum to EU Standard Contractual Clauses. You can contact us for more information about the safeguards that apply.

If you use your own OpenAI or fal account, your direct relationship with that provider and its chosen account region or settings also apply.

8. Security

We use measures appropriate to this small service, including HTTPS, signed HttpOnly browser identifiers, short-lived service tokens, private recording storage, time-limited media links, webhook signature checks, access controls, and rate limits. No online service can guarantee absolute security. Keep BYOK keys private and delete any shared recording if its link reaches someone unintended.

9. Your data protection rights

Depending on where you live and the circumstances, you may have the right to ask for access to your personal information, correction, deletion, restriction, portability, or withdrawal of consent where consent is the basis used. These rights can be limited by law—for example, we may need to keep payment records for tax or legal claims.

Your right to object: you may object at any time to processing based on our legitimate interests. We will stop unless we have compelling legitimate grounds to continue or the information is needed for legal claims.

Email adrian@weknowhowtodoit.com to exercise a right. As SlopTime has no user accounts, please use the browser associated with the purchase where possible and include enough information—such as your Stripe receipt email or checkout reference—for us to locate and verify the relevant records. We may ask for further proof before disclosing or changing information.

If you are in the UK, you can also complain to the Information Commissioner's Office (ICO). We would appreciate the chance to address your concern first.

10. Children

SlopTime is not designed for children, and we do not knowingly collect personal information from anyone under 13. If you believe a child has provided personal information, contact us so we can investigate and delete it where appropriate.

11. Changes to this policy

We may update this policy when the service, providers, or law changes. We will post the revised version here and change the date above. If a change materially affects how we use personal information, we will provide a more prominent notice where appropriate.

12. Contact

WE KNOW HOW TO DO IT LTD, trading as SlopTime
Email: adrian@weknowhowtodoit.com
Website: sloptime.lol