Privacy policy
Last updated 25 October 2026
This page explains what slop.kitchen collects when you visit its website, download one of its games or apps, install one with Mixtape or send feedback, why, who else handles it, how long it is kept, and how to have it deleted. The short version: no accounts, no advertising, no tracking cookies. We see what you type into a feedback form, anonymous counts (of downloads, and visitor statistics where a page loads them), and the request logs of the site's own code, which are kept for up to 3 days.
What this policy covers
- Every page under https://slop.kitchen: the home page, LAST LIGHT (
/lastlight), Sound Lab (/soundlab), Underlight (/underlight) and these legal pages, also when you reach them at www.slop.kitchen, and LAST LIGHT's page at the old addresses below. - The downloads: the download buttons at
/download/and the archives at/dl/, of every game and app, the in-development (DEV) builds included. They are served at slop.kitchen and at the old address lastlight.slop.kitchen, which now serves the archives and LAST LIGHT's page files under/lastlightand redirects everything else to slop.kitchen, as does the site code's own address, lastlight.slop-machine.workers.dev. The old address underlight.slop.kitchen only redirects. - The two Mixtape catalogs,
https://slop.kitchen/mixtape/manifest.jsonandhttps://slop.kitchen/mixtape/dev/manifest.json, from which the Mixtape app installs our games and apps on the handheld. - The software itself: LAST LIGHT, Sound Lab and the DEV builds.
Who runs this site
The site, its downloads and the software are run and made by slop.kitchen (“we”). For anything about your data, use the feedback form on the LAST LIGHT or the Sound Lab page and choose the kind Privacy request.
The software itself
LAST LIGHT, its DEV builds and Underlight's DEV builds do not connect to the internet and collect nothing about you. Their saves and their log.txt stay on your SD card. Nobody sees a log unless you paste it into a feedback form yourself.
Sound Lab works offline too, with one exception: its optional, experimental phone microphone, which shows your phone's microphone on Sound Lab's analyzer.
- The first time you start it, and later to renew it before it expires, Sound Lab downloads a TLS certificate and its key from local-ip.sh, a third-party service, over HTTPS. local-ip.sh therefore sees your handheld's public IP address and the time of the request. Sound Lab keeps the certificate on your SD card, in its
phone-micfolder. - To open the page the handheld shows as a QR code, your phone looks up a local-ip.sh name that contains the handheld's address on your local network. That lookup goes through your DNS provider to local-ip.sh's name servers.
- The sound then goes straight from your phone to the handheld over your local network. It is not recorded, saved or played aloud, and it is not sent to slop.kitchen, to local-ip.sh or to any other service.
- With your own certificate (a
phone-mic.conffile, as Sound Lab'sINSTALL.txtexplains), Sound Lab contacts no one at all.
Sound Lab's projects, sounds, recordings, settings and its log.txt and audio-helper.log stay on your SD card.
The QR codes LAST LIGHT and Sound Lab show on their ABOUT screens only hold a page's address on slop.kitchen. Scanning one opens that page on your phone, as typing the address would. (The phone microphone's QR code, above, points at the handheld itself.)
What is collected, and why
| What | Why | Who handles it | Kept for |
|---|---|---|---|
| Every request for a page, a file, an archive or a catalog: your IP address, the address requested, the time, and your browser's or app's user agent, as part of delivering it | To serve the site and protect it from abuse (our legitimate interest in running it) | Cloudflare, Inc. (hosting and security) | The site's own code keeps request logs for up to 3 days. It answers everything but the pages and the catalogs: the downloads, the archives, the LAST LIGHT trailer, the feedback form, the redirects from the site's old and other addresses, and LAST LIGHT's page-not-found answers. The pages and the catalogs are static files and produce no logs of ours. Cloudflare's own processing follows its privacy policy. |
Downloads of every game and app, DEV builds included: the file name (for example SoundLab-v1.0.0.zip), the download method (a page's ZIP button, or Mixtape) and the country Cloudflare derives from your IP address. We store no IP address or user identifier in these counts. |
To count download starts per version and method (legitimate interest). These are not counts of unique people or completed installs: our own checks and HEAD requests are not counted, and restarting a download can count again. |
Cloudflare Workers Analytics Engine | 3 months |
Visitor statistics, on the LAST LIGHT and Sound Lab pages only, and only while they load Cloudflare Web Analytics' script: page views, the referring site, country, browser and device type, page load times. A page that loads it has static.cloudflareinsights.com in its source; no other page ever loads it. |
To know how many people visit and what they look at (legitimate interest) | Cloudflare Web Analytics. It uses no cookies and does not fingerprint you or follow you across sites. | In aggregate, as Cloudflare keeps it |
| Feedback you send with the form on the LAST LIGHT or the Sound Lab page: which of the two it is about, the kind, your message, the version that page offered when you sent it, your contact details if you give them, the log text if you paste it, and the time you sent it | To read and act on it, and to answer you if you asked us to (your request) | Stored as an issue in a private GitHub repository that only the developers can see. GitHub, Inc. hosts it. | Until it is dealt with and no longer useful, or until you ask us to delete it |
| The anti-spam check on both feedback forms: signals from your browser and device, and your IP address at the moment you send | To keep automated spam out of the forms (legitimate interest). Your IP address also limits how many messages one address can send per minute. It is used at that moment and not stored with your message. | Cloudflare Turnstile (see Cloudflare's Turnstile privacy addendum). It only loads when you scroll down to a form. | Not kept by us |
The Mixtape catalogs are static files that Mixtape reads each time it starts. We count nothing about these reads; only the first row applies to them. An archive Mixtape downloads is counted as in the second row. Mixtape itself is a separate app, not made or run by slop.kitchen.
We do not sell or share your data with anyone else. We do not use it for advertising or profiling, and we do not combine it with other data.
Cookies and storage
This site sets no cookies of its own and stores nothing in your browser. The anti-spam check is run by Cloudflare. It may store what it needs to work while a form is open, which is strictly necessary for the form.
Where data is processed
Cloudflare and GitHub are based in the United States and run servers around the world, so your data may be processed outside your country. Both say they provide safeguards for international transfers, such as the EU Standard Contractual Clauses and the EU–US Data Privacy Framework. local-ip.sh, used only by Sound Lab's phone microphone, is run by a third party under its own terms.
Your rights
Depending on where you live (for example under the EU or UK GDPR, or Californian law), you can ask to see the data we hold about you, correct it, delete it, or object to how we use it. You can also complain to your data protection authority.
To make a request, send feedback of the kind Privacy request from the LAST LIGHT or the Sound Lab page. Tell us how to find your earlier message: the contact details you gave, roughly when you sent it, and a few words from it. We hold no account or profile for you, so if you sent feedback without contact details, those words are the only way we can find it. We answer within 30 days.
Children
The site is not aimed at children. If you are under 16, please don't put personal details such as your name or email in a feedback form.
Changes
If this policy changes, the new version will be on this page with a new date at the top.