Privacy Policy

SlamTilt is a camera-first pinball score tracker: photograph a machine's backbox, and we identify the game and read the scores. This policy covers the SlamTilt mobile app and the slamtilt.app website. Questions about your privacy go to privacy@slamtilt.app.

Only what a session needs:

• Account & identity — your email address, used to sign in and secure your account, and the handle and initials you choose when you sign up.
• Photos you take — the backbox photo you capture to log a game.
• Game data — the scores we read, the machine we identify, an optional venue (one you pick, or one we suggest from your location — see below), and an optional play-quality rating.
• Friends — the connections you make and the score assignments you send or receive.

Location is optional and only used with your permission. If you allow location access, then when you capture a session we read your device's approximate location once — to suggest a nearby venue, and, if you've set a home venue, to check whether you're there. Those coordinates are used only in that moment and are sent to the venue and geocoding providers below to resolve a place name; we never store your coordinates. A session keeps only the resulting venue (or a private/home result), never your location. If you don't grant location access, capture still works — the session simply won't have a venue.

To read scores from your photo, the image is sent to one of our score-reading providers — Anthropic or OpenAI — which processes it to extract the scores and identify the game. Which provider receives a given photo depends on where you captured it, and a photo that reads poorly on the first pass may be sent to a second provider for a closer look. We then match the game against the Open Pinball Database catalog using a text query — never your photo. We use your data to show your personal history and your friends' feed, and to let you share a session through a link only you can create and revoke. We do not use your data for advertising, and we do not sell it.

We rely on a small set of providers who process data on our behalf, under their own terms:

• Supabase — hosting, database, storage, and authentication.
• Anthropic and OpenAI — read the scores from your photos.
• Open Pinball Database — the machine catalog (text queries only).
• Pinball Map — finds the nearest venue from your approximate location when you allow location access.
• OpenCage — geocoding: turns your approximate coordinates (at capture) or a location you type (when setting a home venue) into a city name. It receives only that single lookup.
• Sentry — crash and performance diagnostics from the app, tied to your account identifier so we can trace a fault back to a real session.

We never share your data with advertisers or data brokers.

Your photos are stored in a private bucket — no photo is ever a public object. When one needs to be shown, we mint a signed link that expires within minutes. A session is visible only to you, the players you tag, and your accepted friends — until it is ranked on a public leaderboard, at which point that score, your identity as its owner, and the session behind it become public by default. Being ranked is a term of using SlamTilt, not an opt-in. You can also share a session yourself with an unguessable link you can revoke at any time. A score you assign to a friend stays pending and never touches their record until they confirm it.

• Delete your account from the app at any time; we remove your account and its data.
• Revoke any Share link instantly.
• Confirm, edit, or reject any score a friend assigns to you.

Any public-facing location is shown as city/region only — never your exact coordinates. Your home venue name is private until you choose to list it publicly.

To exercise any right we haven't already automated, email privacy@slamtilt.app.

We keep your sessions until you delete them or close your account. Signed photo links expire within minutes of being issued.

When you photograph a machine, we store the photo privately (never public; access is via short-lived signed links only) and a private, owner-only record of what the app read from it. We keep the photo as the evidence behind your scores.

We do not collect biometric information. The app reads the scoreboard text and the machine's artwork to identify the game and your scores. It does not perform facial recognition and never creates or stores a faceprint or any other biometric identifier.

A photo that never becomes a saved session is automatically deleted from our storage. Saved sessions and their photos remain until you delete them; deleting a session or your account removes its photos.

SlamTilt is rated 13+ and is not directed at children under 13. You must be 13 or older to create an account, and we do not knowingly collect personal information from anyone under 13.

We'll update this page when our practices change and revise the effective date above. We'll surface material changes in the app.