SlopWall privacy notice

Last updated October 11, 2026.

General Ontology LLC ("General Ontology," "we," "us," or "our") operates SlopWall and is responsible for the data in this notice. SlopWall's Chrome extension has one purpose: show and collect community ratings of low-value online content on supported sites. The notice covers the extension, the slopwall.app website, and email you send us (the "Service"). If you are in the European Economic Area or the United Kingdom, also read the Notice to European users.

Chrome Web Store disclosure

Once installed, the extension reads identifiers and visible content on supported pages so it can attach community ratings. Passive lookups send only short hash prefixes derived from post and author identifiers. They do not send the page address, page text, or clear author identifier.

When you deliberately submit a rating or evidence, or turn on label submission, SlopWall sends the contribution, the minimum content and author identity needed to attach it, generated identifiers, interaction context and timing, and any media features described below. SlopWall uses this data only to provide, secure, measure, and improve its community-rating features. It does not sell it or use it for advertising.

Extension data

The extension processes visible supported posts and public author identifiers on your device. Passive score lookups send separate 4-8 character SHA-256 prefixes for the post and author. The response contains matching full hashes and community aggregates; the extension finishes the match locally. These requests reveal that a browser requested those prefix buckets, but not which returned item matched. Facebook and LinkedIn posts shared with a limited audience, posts from private Instagram accounts, and private GitHub repositories, are never looked up, rated or submitted; such a post offers only a mute that stays on your device.

A deliberate rating can send:

the supported site, content type, platform content identifier (the public post address, on sites that use it as the stable identifier), and the public author key when author summaries are available;
your 0-5 score, selected reasons, edits, response timing, and the rating information visible when you answered;
a redacted preview of the item's visible text, up to 2,000 characters (for a paywalled post, only its free preview), with links reduced to the linked post's ID or the site's address and @mentions to a one-way fingerprint, and hashes derived from the full visible text;
available public engagement counts as shown when you submit (such as likes, reposts, replies, views, bookmarks or saves, and counts a site shows for that kind of item, such as a GitHub repository's stars), including counts a page shows beside the item when the page ties them to it, and on Reddit the post's upvote percentage, which new Reddit includes in the page without showing it; the post timestamp, platform AI labels, whether the site showed the item as an ad, capture context, and the extension version;
optional evidence: a selected quote of up to 1,000 characters, an image region normalized to the whole picture with its aspect ratio, or the start and end times of a marked stretch of video with the video's length. When at least three people mark the same passage or image area, other SlopWall users may see it highlighted, with counts but not who marked it;
hashes and a PDQ visual fingerprint for images in the item; and
a random contributor and session identifier, plus a daily keyed fingerprint of your network address for abuse prevention. The address itself is not stored.

If you turn on label submission, SlopWall sends posts that carry a platform AI label the same way as a rating, without a score, so it can hide them for others.

Image fingerprinting runs only for items you deliberately rate or mark with evidence, and for labeled posts when label submission is on: the extension downloads the image again, without cookies, from the server that delivered it. The extension does not send SlopWall the image address, SlopWall does not store original images or video, and no image embedding model runs in the extension.

After you agree to rate or turn on label submission, the extension keeps your anonymous contribution session as a random token in its own storage, which websites can't read. It lasts up to 400 days after you last use SlopWall's rating features. Removing the extension deletes it, so reinstalling starts a new contributor. Earlier versions kept the session in a secure, HTTP-only slopwall.app cookie; updating moves that session into the extension and deletes the cookie. Passive lookups and uninstall feedback send no session token or cookies, and the website sets none and uses no analytics service or advertising, only the request counts described below.

Settings, author mutes, a local copy of your recent ratings, marked passages and marked image areas, the posts whose labels you submitted, a bounded diagnostic log, and a bounded list of community highlights you have been shown stay on your device. The highlight list keeps only post, passage and image hashes, positions, and when they were last shown, so a passage or image area you mark afterwards is labeled as already seen. The diagnostic log holds site names, sanitized error messages and times, never page addresses or content, and leaves your device only if you copy it. Badges and highlights that SlopWall draws, including your own score, marked passages and marked image areas, become part of the page, so its scripts can read them. You can export settings and mutes to a file.

Feedback and other sources

Uninstall feedback can include a reason, a note, and the extension version, never cookies or contributor identity; its abuse limiter uses the daily network-address fingerprint without storing it in feedback records. Removing the extension opens the uninstall page with its version in the address. If you email hello@slopwall.app, we use your address and message only to reply and improve SlopWall. SlopWall does not ask for sensitive information, such as your health, religion, or political opinions; please leave it out of feedback and email. We may also import lists of accounts identified as publishing AI-generated content, either public lists published by others or our own documented review. To dispute a score or a list flag, email hello@slopwall.app.

We use personal information only for these purposes, each shown with its legal basis for people in Europe:

showing ratings on the supported pages you visit through hash-prefix lookups (legitimate interests);
recording your ratings, evidence and label submissions, calculating aggregates, matching related observations, keeping consent and retries correct, and showing your ratings back to you (consent, given before your first rating and your first evidence, and when you turn on label submission);
showing community scores for public accounts and the lists that include them (legitimate interests);
measuring and improving SlopWall, including evaluating and training its instruments and models, and keeping contribution history, including author and media observations, after you withdraw consent, so results stay reproducible, posts stay linked to their authors, and abuse can be investigated (legitimate interests);
security and abuse prevention, including the network-address fingerprint and rate limits (legitimate interests);
replying to feedback and email, and completing a business transfer (legitimate interests); and
complying with law and legal process, including privacy requests and the records that let them be reapplied after a restore (compliance with law).

Our legitimate interest is a secure, trustworthy, and useful community-rating service. Aggregates do not identify you, we do not attempt to reidentify de-identified data, and we do not engage in automated decision-making or profiling that produces legal or similarly significant effects.

SlopWall does not sell or license individual contributions or contributor-level data. It does not use or transfer extension data for personalized advertising, unrelated profiling, credit decisions, or data brokerage. The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

We share personal information only with service providers needed to host, secure, or operate SlopWall (hosting, database, network and email providers); with authorities and others when required by law or to investigate fraud or abuse; and with an acquirer, successor, or assignee in a business transfer, with any consent required by policy or law. Anyone who uses SlopWall or queries its service can see community scores, highlighted passages and image areas, other aggregates, and the names of lists that include an account, never who rated or marked anything. SlopWall's own curators also rate posts, and the extension labels a curator's rating while few people have rated the post. When a curator rates a post as slop and marks its author as bot-like or as using an AI profile picture or bio, the account shows as listed by a SlopWall curator, without naming the curator. Humans do not read individual extension data except with your specific consent, when needed for security or legal obligations, or after aggregation and anonymization for internal operations.

Retention and security

We keep personal information for as long as these purposes need it. Contribution and audit history is kept while SlopWall operates so aggregate and research results remain reproducible. Server error logs record the request method, a redacted request path, and the error message, never request headers or bodies; our hosting provider keeps them and any database backups for its standard retention period. The server also counts the requests it answers each minute, or over another short interval of up to five minutes, by type, such as score lookups, rating submissions or browser loads of each slopwall.app page: how many there were, their status codes, how long they took, and how many waited for a database connection, labeled with a random identifier of the server process that counted them. These counts never include network addresses or their fingerprints, other sites' page or post identifiers, hash prefixes, cookies or browser details. They stay in our database with our hosting provider, where we view them in a dashboard, and are deleted after 90 days. The server also writes the same counts, and nothing else, as lines in its logs, which our hosting provider keeps for its standard log retention period. Rate-limit counters are deleted after one day of inactivity. Privacy requests and our replies are kept so verified unlinking and erasure can be reapplied after a restore.

Production traffic uses HTTPS. The application database stores no raw IP addresses and keeps session tokens only as hashes; hosting and network providers necessarily process request addresses to deliver and protect the service. We use technical and organizational safeguards to protect personal information, but no internet service can guarantee security.

Your choices and rights

Badges and lookups: switching off an on-by-default site in Settings, or disabling or removing the extension, stops them. Optional sites stay off unless you turn them on, and rating is always optional.
Ratings and evidence: while your contribution session is active, you can edit or retract ratings and clear evidence. You can withdraw consent at any time, without affecting earlier processing: in Settings, Withdraw ratings retracts your current ratings and label submissions and clears your evidence, Withdraw evidence clears your current evidence, and turning off label submission stops it. Withdrawal covers the current session and removes its ratings, label submissions and evidence from public aggregates; the history under Retention and security remains unless you request erasure. Removing the extension sends nothing further apart from opening the uninstall page, and does not withdraw ratings already sent.
Requests: email or write to us to request verified unlinking or erasure, including for an expired or lost session, or, depending on where you live, access, a machine-readable copy for you or a third party you choose, correction, restriction, or an objection to processing, or complain to a data protection authority. For lookups, which rely on legitimate interests, the controls above also stop that processing. We may ask for a generated identifier retained by your browser to verify and locate your records, and if we decline a request, in whole or in part, we will tell you why, subject to any legal restrictions. Verified erasure removes mutable ratings, label submissions, evidence, media observations, author observations, active sessions, and consent receipts. Immutable audit records remain, but the erased lineage is excluded from future public aggregates, exports, and analyses. Published aggregate results and models already built from earlier data may not be reversible, and identity-free feedback cannot be found from a contributor ID.
Do Not Track: SlopWall does not respond to these signals; use the controls above instead.

Other sites

SlopWall shows ratings on websites that other companies operate, and the Service links to other websites. We do not control those websites and are not responsible for their privacy practices; their own privacy policies apply when you use them.

International data transfer

General Ontology is based in the United States, where SlopWall's service and database are hosted. If you use SlopWall from elsewhere, your personal information is transferred to and processed in the United States, where privacy laws may not be as protective as those where you live.

Children

SlopWall is not intended for anyone under 16. If you believe we have collected personal information from your child in a manner prohibited by law, please contact us. If we learn that we have collected personal information from a child without the consent required by law, we will comply with applicable legal requirements to delete it.

Changes to this privacy notice

We may change this notice. For material changes, we will update the date at the top and post the new version at slopwall.app/privacy. If a change affects what the extension collects when you rate or add evidence, the extension asks for your agreement again before collecting the new data. We will not use or share data already collected in a materially different way without your agreement. Changes take effect when we post them.

Notice to European users

This section applies to people in the European Economic Area and the United Kingdom, where "personal information" includes "personal data" as the GDPR and UK GDPR define it. General Ontology is the controller. Legal bases appear with each use under How we use and share information, and your rights under Your choices and rights. If you are not satisfied with our response or with how we process your personal information, you can complain to the data protection authority where you live; see the EEA data protection authorities or the UK Information Commissioner's Office. Contact us for more information about transfers to the United States.

How to contact us

For deletion, unlinking, access, or other privacy questions, email General Ontology at privacy@slopwall.app.

You can also write to General Ontology LLC, 522 W Riverside Ave, Ste N, Spokane, WA 99201, USA.