Privacy

Last updated 2 September 2026 · Applies to PaintRoom (paintroom.io) and Slop Theater (slop.theater)

The short version: our games are built so as not to know who you are. No account, no email needed to play, no advertising, and nothing about you is ever sold. The long version follows, as the GDPR requires.

Who is responsible

TOTEM, 1 avenue Galois, 92340 Bourg-la-Reine, France, is the controller of this data. Contact: hello@kevin-tale.com.

What we hold, and why

• A random identifier, made by your browser the first time you enter and stored there. It is how a room recognises you between visits, and what your purchases hang on. Without it there is no game.
• The name you choose, and in Slop Theater the character you picked. They show above your head to other players.
• Where you are in the room: in Slop Theater, your position and whether you are seated are shared live with the people near you so they can see you. This is not recorded; it exists only while you are in the room.
• What you paint, in PaintRoom: for every gesture, the time, the surface, the position, the colour and which painter it belongs to. This history is what makes archives, timelapses, and the answer to "who painted this pixel" possible.
• Technical logs kept by the web server: IP address, browser, and the time of each request. They exist for security and for dealing with abuse.
• Moderation records: for a ban, the identifier, the date and the reason.
• Payments: the email address you give Stripe, the country used for tax, and whether the payment succeeded. Never your card number.
• The email you leave on the PaintRoom waitlist, if you ask to be told when it opens. That address is for that announcement, and nothing else.
• Usage statistics, described under Analytics below.

On what basis

• Performing our agreement with you: running the room, granting what you bought.
• Our legitimate interest: keeping the service secure, preventing abuse, keeping a shared painting intact, and knowing roughly how many people visit and from where.
• Your consent: PaintRoom's optional analytics, and the opening announcement if you asked for it. You may withdraw either whenever you like.
• Legal obligation: accounting records for purchases, kept for as long as French law demands.

Who else sees it

• Hetzner Online GmbH, in Germany, hosts the servers.
• Stripe processes payments.
• Cloudflare registers our domains, answers DNS, and in Slop Theater relays the video to you from its network; in doing so it sees your IP address in transit, as any network carrier does. It also provides the visitor statistics described under Analytics.
• Resend, in the United States, holds the PaintRoom waitlist and sends the opening mail if you asked for it.
• PostHog, in the European Union, receives PaintRoom analytics if you agreed to them.

The channel shown in Slop Theater, Infinite Slop, is fetched by our server and then shown to you. Its makers do not receive your IP address or anything else about you from us. Other players see your name, your character, where you stand or sit, and in PaintRoom what you paint — that is the game itself. Nobody buys anything from us.

How long

• your identifier and what hangs on it: while you keep playing, and a reasonable idle period after;
• a PaintRoom room's painting history: as long as its archive stays published;
• server logs: up to twelve months;
• moderation records: while the ban stands;
• accounting records: ten years, as French law requires;
• waitlist email: until you unsubscribe, or until you ask us to erase it.

Your rights, and how to use them

You can ask to see what we hold, correct it, have it erased, restrict or object to its use, receive it in a portable form, or withdraw a consent you gave. Write to hello@kevin-tale.com. Because we do not know your identity, an email address alone does not tell us which player you are: quote the identifier your browser holds (in PaintRoom it is shown in the Privacy tab of the "?" panel), and if you have bought something, attach the Stripe receipt. You may also complain to the CNIL, the French data protection authority, at cnil.fr.

Children

Our games are not for children under 13. If you are under 15, a parent or guardian must agree before you enable PaintRoom's optional analytics. If you believe a child under 13 has given us data, write to us and we will remove it.

What sits in your browser

Besides the identifier, your browser keeps your name and your character, and in PaintRoom your Cubvatar and quick colours, so the room is as you left it when you return. These are necessary to the game and are not used to follow you anywhere else. No advertising cookie is ever set.

Analytics

Slop Theater uses Cloudflare Web Analytics. It sets no cookie and stores no identifier about you; it counts page views and visitors, the country and the kind of device they came from, and how fast the page loaded. Your IP address is used to infer the country and is not kept. It cannot recognise you from one visit to the next.

PaintRoom asks first. Only if you agree on the bar at the top of the screen does PostHog (eu.posthog.com) receive events — that you opened the site, entered a room, painted, opened the gallery, started or finished checkout — and, if you agree, a recording of the session kept for thirty days. Your IP address is anonymised before it is stored. Refusing changes nothing about how the game plays, and you can change your mind from the game's Privacy tab or by writing to us.