Privacy policy

About this policy

Slop Awwwards is operated by NAYPACHE STUDIO.

This policy describes the current Slop Awwwards website and its preview environment. Slop Awwwards is an independent website discovery, commentary and community voting project. For privacy questions or requests, email slopawwwards@gmail.com.

Information we process

• Votes and reactions: your score or reaction, the relevant website and ballot or month, timestamps, request identifiers and moderation status. You do not need a public account.
• Browser and security information: a randomly generated browser identifier and keyed hashes used to prevent duplicate actions and abuse. Our server processes your IP address to generate network hashes; it does not store the raw IP address in voting or submission database records. These identifiers are pseudonymous, not necessarily anonymous.
• Submissions: the website link and reason you provide, submission time, moderation records and abuse-prevention identifiers. Please do not include sensitive information, passwords or private information about other people.
• Website listings: publicly available website names, URLs, screenshots and editorial descriptions, obtained from submissions, public websites and our own review. Screenshots may contain information displayed on the source website.
• Messages: if you email us, we receive your email address and what you send. Administrator authentication information is processed separately for restricted owner access.

Our hosting and security providers also process connection information, including IP addresses and browser or device signals, to deliver and protect the service.

Why we use it

We use this information to record votes, calculate results, review submissions, display listings, respond to requests and protect the service. Where European data protection law applies, our basis for these activities is our legitimate interest in running a moderated editorial website and maintaining fair, secure voting, balanced against your rights. We may also process information where necessary to meet a legal obligation.

Automated checks can reject or flag suspicious actions. Award rankings are calculated from accepted votes; they are not decisions about an individual’s legal rights or eligibility for essential services. Contact us if you believe a security check has wrongly blocked you.

Cookies and browser storage

• Voting, submission and Swipe cookies: signed browser identifiers, lasting up to one year, support duplicate prevention and protected interactions.
• Security verification: a short-lived verification cookie lasts up to 10 minutes after a successful anti-bot check.
• Session storage: remembers the entrance animation and Swipe session state in your browser tab. Your browser controls when this is cleared.

We do not install advertising cookies. Cloudflare Web Analytics does not use cookies or browser storage. You can clear or block storage through your browser settings, but voting, submissions or other interactive features may stop working. Clearing browser storage does not delete records already stored on our servers.

Audience and performance measurement

We use Cloudflare Web Analytics on public pages of slop-awwwards.com to understand page views, visits, referring websites, countries, device and browser types, and page performance. This measurement includes EU visits. We exclude administrator pages and local and staging environments from this analytics integration.

The analytics beacon processes page and referring URLs and browser performance measurements. It does not record what you type into forms, your votes, or session recordings. According to Cloudflare, the service does not use cookies, browser storage or fingerprinting, and discards incoming IP addresses rather than storing them in its analytics databases or logs. See Cloudflare’s explanation of this processing.

We use these aggregate reports to improve the website and understand its audience. Where personal data is processed and European data protection law applies, we rely on our legitimate interest in proportionate audience and performance measurement. You may object by contacting us; browser content-blocking tools can also prevent the analytics script from loading.

Who receives information

Cloudflare provides hosting, media storage, screenshot processing, Web Analytics and security, including Turnstile. Supabase provides the database and administrator authentication. Google processes messages sent to our Gmail contact address. These providers receive information needed to supply their services. See Cloudflare’s Turnstile privacy notice for its security processing.

Approved listings, screenshots, editorial text and aggregate scores are public. Private submission records and browser or network identifiers are not published. We do not sell personal information or share it for targeted advertising. Information may also be disclosed where required by law or necessary to address unlawful activity or protect rights.

Providers may process information outside your country, including outside the European Economic Area. Where required, international processing must be covered by applicable safeguards, such as an adequacy decision or standard contractual clauses. Contact us for information about the arrangements relevant to your data.

How long information stays

Website listings, screenshots and historical award statistics are kept as an editorial archive. Private submissions, individual vote and reaction records, and their associated identifiers currently have no automatic expiry; they remain stored unless removed. Cookie expiry does not remove these records.

When reviewing a deletion request, we consider whether information is still needed to resolve moderation issues, investigate abuse, preserve accurate results or meet legal obligations. Public aggregate statistics may remain after identifying information is removed. Provider logs and backups follow the relevant provider’s settings and retention arrangements.

Your choices and rights

Depending on the law that applies, you may request access, correction, deletion, restriction or portability of personal information, and object to processing based on legitimate interests. You may also complain to your local data protection authority.

Email slopawwwards@gmail.com with the relevant page or a description of your request. Because public participation does not require an account, we may need limited additional information to locate a record and verify a request. Do not send passwords or authentication cookies. We will respond within the period required by applicable law.

External sites and updates

Following an external website link takes you to a separately operated service with its own privacy practices. We may update this policy when the project changes and will update the date above. Material changes will be highlighted on the site where appropriate.