Overview
SlotDeck is an independent slot-game discovery and information platform operated through slotdeck.com. SlotDeck is not a casino, does not accept wagers, and does not hold player funds. This policy applies to SlotDeck's website, account access, and first-party site features.
Information we collect
Account information
If you register or sign in by email, SlotDeck and its authentication provider process your email address, account identifier, authentication events, and secure session information. SlotDeck uses passwordless sign-in links and does not ask you to create a password.
Site and device information
Hosting and security systems may process standard request information such as IP address, browser or device type, requested URL, timestamps, and error or security events. SlotDeck uses Plausible Analytics for aggregate site measurement and does not use advertising trackers.
Ratings and likes
When a signed-out visitor rates or likes a game, SlotDeck places a random essential token in an HTTP-only cookie. The server stores a one-way hash of that token with the selected game, rating, or like. The raw token is not stored in the database and is not used to build an advertising profile.
Information you send
If you contact SlotDeck, we receive the information in your message and the contact details you choose to provide. Do not send passwords, sign-in links, verification codes, payment details, or identity documents.
Google sign-in and Google user data
When you choose Continue with Google, Google asks for permission to provide SlotDeck with the minimum basic profile information needed for authentication:
- your Google account's unique identifier;
- your email address;
- your display name; and
- your profile image, when your Google account provides one.
SlotDeck uses this information only to create or authenticate your SlotDeck account, display your account identity, maintain your signed-in session, protect the account, and provide account-backed SlotDeck features. SlotDeck does not request or access your Gmail messages, Google Drive files, contacts, calendars, payment information, or Google password.
SlotDeck does not sell Google user data, use it for advertising, transfer it to data brokers, or use it to train generalized artificial-intelligence or machine-learning models.
How we use information
- provide, authenticate, and secure SlotDeck accounts and sessions;
- deliver requested features such as ratings, likes, and future account-backed collections;
- operate, debug, protect, and improve the site;
- measure aggregate traffic and feature performance;
- respond to support, privacy, and data-correction requests; and
- comply with applicable legal obligations and enforce site terms.
Sharing, transfer, and service providers
SlotDeck does not sell or rent personal information. Information is disclosed only when needed to operate the service, protect users, comply with law, or complete a transaction you request.
- Supabase provides account authentication, session handling, and SlotDeck-owned data storage.
- Google processes the Google OAuth sign-in flow when you choose that option.
- Vercel hosts and delivers the SlotDeck application and may process standard request and security logs.
- Plausible Analytics provides aggregate, privacy-focused site analytics.
These providers process information on SlotDeck's behalf for service delivery and security. SlotDeck may also disclose information if required by law, to investigate abuse or fraud, or to protect the rights and safety of SlotDeck, its users, or others. Google user data is not transferred for advertising, resale, credit decisions, or unrelated purposes.
Data retention and deletion
Account and authentication information is retained while your SlotDeck account is active and for only as long afterward as reasonably necessary to provide the service, resolve disputes, maintain security, meet legal obligations, and enforce agreements. Security and hosting logs are kept according to operational and provider retention settings.
The anonymous game-engagement cookie lasts for up to one year unless you clear it sooner. Associated hashed rating and like records may remain so aggregate community counts stay accurate. You may request deletion of your SlotDeck account and associated personal information through the contact page. Include the email tied to the account, but never send a password, sign-in link, or verification code. SlotDeck may retain limited records where legally required or necessary for fraud prevention and security.
Security
SlotDeck uses HTTPS, secure session cookies, server-side credential storage, least-privilege access controls, and managed authentication infrastructure. Sensitive service credentials are not exposed to the browser. No online service can guarantee absolute security, so you should protect access to your email and Google account and never share a SlotDeck sign-in link or verification code.
Your choices and privacy rights
- You can use most public SlotDeck features without creating an account.
- You can sign out from the account menu and revoke SlotDeck's Google access from your Google Account permissions.
- You can clear browser cookies, although doing so may sign you out or reset anonymous rating and like selections.
- You can request access, correction, or deletion of personal information by contacting SlotDeck.
Privacy rights vary by location. SlotDeck will review verified requests under applicable law. Questions and requests can be sent through the SlotDeck contact page.