sloppimonsters (sloppimonsters.ai) is operated by Puzzlelike. This policy explains what we collect, why, and who touches it. Short version: we collect the minimum needed to run a collaborative creature game, we don't sell your data, and we don't run ad tracking.
Playing anonymously: a random session cookie (so your packs and cards stay yours), reactions and other activity you choose to submit, and standard server logs (IP address, used for rate-limiting and abuse prevention).
With an account: your email address, a password (stored hashed by our authentication provider — we never see it), and your chosen name plus four-digit account tag. If you sign in with Google, we receive your email address from Google; we never see your Google password.
If you buy gummies:your date of birth (to verify you're 18+) and purchase records. Card details go directly to Stripe, our payment processor — they never touch our servers.
This is a shared game: mutation prompts you submit, your display name or username next to them, minted cards from public Labs, and edition ownership lists are visible to everyone. Private and unlisted Labs are only visible to people with access, but their prompts are still processed (moderation, image generation) like public ones.
Vercel (hosting), Supabase (database and authentication), Cloudflare (image storage), Google (image generation for mutations — your prompts are sent to Google's AI services; and sign-in, if you use it), and Stripe (payments). Each receives only what it needs for its job.
Essential cookies only: a session cookie and, if signed in, an account cookie. No advertising or cross-site tracking cookies.
sloppimonsters is not directed at children under 13, and purchases require being 18 or older. If you believe a child under 13 has created an account, contact us and we'll delete it.
You can play without an account. You can request deletion of your account and associated personal data by emailing hello@puzzlelike.com— note that prompts already woven into a creature's public history and minted cards may persist in de-identified form (the game's shared record). We'll respond to access, correction, and deletion requests as required by applicable law.
We'll update this page when the policy changes and adjust the date above. Material changes get an in-app notice.