Privacy Policy

Last updated June 5, 2026

SlopScrub lets you clip sections of websites into taste profiles and feed them to your AI. This policy explains what we collect, why, and who processes it. We keep it short and plain.

What we collect

• Account. Your email address, used to sign you in with a one-time link.
• Taste profiles and clips. The things you choose to save: page URLs and titles, short text excerpts, small HTML snippets, distilled style tokens (colors, fonts, spacing), and screenshots of the sections you clip.
• API tokens. Tokens that connect the extension and the MCP server to your account. We store only a hash, never the token itself.
• Scanner input. URLs you submit to the slop scanner.
• Technical data. Standard server logs and your IP address, used to keep the service running and to rate-limit abuse.
• Anonymous usage stats. From the extension: a random install id, your browser, and the app version, used only to count active installs by browser. No page content, no personal data; off-switch in the extension.

How we use it

• To run the service: store your profiles, sync them across devices, and serve them to your AI over MCP when you ask.
• To show community packs you choose to publish.
• To keep the service secure and prevent abuse.

We do not sell your data, and we do not use your clips or profiles to train machine-learning models.

The browser extension

The extension reads page content only when you actively clip a section or page. It stores clips locally and syncs them to your account when you are signed in. It does not track your browsing or read pages in the background.

It does send one anonymous usage ping (on install and about once a day) so we can count how many installs are active and on which browsers. That ping contains a random install id (not linked to you), your browser, the extension version, and whether you are using it with or without an account. It contains no page content and no personal data, and we do not store your IP. You can turn it off from the extension popup.

When you scan a site

The slop scanner fetches the page you submit and sends its content to OpenAI to assess how templated it looks. Do not scan pages whose content you are not allowed to share with a third party.

The MCP server

The MCP server runs on your own machine, started by your AI client. It uses your token to read your profiles from our API and hands them to the client you connected. It does not send your data anywhere else.

Who processes your data

We use a small set of providers to run the service:

• Supabase stores your account, profiles, and clips, and sends your sign-in emails.
• Vercel hosts the website and API.
• OpenAI analyzes the content of pages you submit to the scanner.

These providers process data only to provide their part of the service.

Community packs are public

When you publish a profile as a community pack, its name, summary, your chosen @handle, and the clips in it become publicly visible and can be remixed by others. Unpublish it at any time to remove it from the gallery.

Keeping and deleting your data

We keep your data until you delete it. You can delete individual clips and profiles, revoke tokens, and unpublish packs yourself. To delete your whole account and its data, contact us. Scanner results may be cached for a short time and then expire.

Your rights

You can ask us to access, correct, export, or delete your personal data. Email us and we will help.

Children

SlopScrub is not directed to children under 13, and we do not knowingly collect their data.

Changes

If we change this policy, we will update the date above and, for significant changes, give notice in the app.

Contact

Questions or requests: hello@slopscrub.com.