Privacy Policy

This privacy policy describes how LostPhantom ("we", "us") handles information collected through the Slime Universe game accounts used by Slime Wars, Slime Merge and Slime Defense, through the anonymous play statistics every Phantom Studios game reports, and through our Roblox account verification service and community website.

Slime Universe game accounts

A Slime Universe account is optional. All three games are fully playable with no account at all, offline. An account exists so progress, friends and purchases follow you between devices.

What an account holds

• A username you choose, and a password (stored only as a scrypt hash — we never hold the password itself).
• A public friend code, and one secret key per device you sign in on.
• Your saves, achievements, shard and gem balance, match history and per-game stats.
• An optional recovery email address. It is never required, and accounts for players under 13 cannot have one at all.
• Whether the account predates our 13+ policy — see below.

Age: accounts are 13+

Creating an account asks for your birth year, once. If it shows the player is under 13, no account is created - the games remain fully playable without one, and progress stays on the device. Either way the year is discarded immediately: only the yes-or-no is stored, and the year itself is never written down.

Accounts created before this policy, under our earlier kid-safe rules, continue to work and keep their protections, enforced on our server rather than in the game:

• No email address can be attached to them.
• They are not listed when other players search by name. Friends add them by exact friend code instead.
• A sign-in from a place the account has never used cannot change the password, alter two-factor, or sign other devices out for 72 hours, while existing devices can act immediately.

Sign-in security information

When you sign in, we record a salted one-way hash of your IP address and a two-letter country code against that device and in your account's activity log.

• We do not store the IP address itself, in any form we can read back. The hash lets us tell "same place as last time" apart from "somewhere new", which is all this is for.
• The country is stored so your device list can say where a session came from. We deliberately do not store a city.
• This is used to warn you about a sign-in from somewhere new, and to answer "was that me?" if you think someone has got into your account.
• Activity log entries are deleted after 90 days, and only the most recent 200 are kept.

Email we send, and when

If — and only if — you have added and confirmed a recovery address, we email it when a new device signs in, when the password changes, when two-factor sign-in is turned on or off, when the recovery address itself is replaced, and when deletion is scheduled. Accounts under 13 have no address, so they receive none of these.

Passwords and a third-party check

When you set or change a password we check whether it appears in public lists of leaked passwords, using Have I Been Pwned's range API. Only the first five characters of a SHA-1 hash of the password are sent. That service cannot learn your password, the full hash, your account, or which answer matched.

Seeing it, and deleting it

• See everything: your account screen has an activity log, and you can request a full copy of everything we hold as a single file.
• Delete it: deletion is available in-game and on the site. It is scheduled with a seven-day grace period — signing in again at any point before then cancels it — after which the account and every record attached to it is removed, including saves, wallet, match history and the activity log.
• A parent or guardian can make either request on a child's behalf using the contact details below.

What we never do

• We do not sell, rent or share account data with anyone.
• We do not use it for advertising, and there is no advertising in any of the games.
• We do not build profiles for targeting, and we do not run third-party analytics or tracking SDKs in the games. We do collect anonymous play statistics of our own — see Game analytics for exactly what that is.

Game analytics

Most Phantom Studios games report anonymous play statistics. Where they do, it is on by default, and each game has a switch to turn it off. The switch is not named the same in every game, so it is listed below, and each game's own privacy page says exactly what that game sends, field by field, read out of its code. It is separate from a Slime Universe account: it happens whether or not you have one, and it is not linked to one.

It exists for one reason. These games are made by one person, and the question "which parts of this do people actually play?" cannot be answered by guessing. There is no commercial use of any kind.

Which games send what, and the switch in each

• Winter Is Here — a daily report. Switch: ANONYMOUS STATS, on the MORE page under SETTINGS. Details.
• Dug Out — a daily report. Switch: SHARE ANONYMOUS STATS, on the SETTINGS page; ONLINE FEATURES off stops it too. Details.
• Smokestack Valley — a daily report. Switch: Share anonymous stats, Settings → PRIVACY. Details.
• Pencil and Paper — a daily report. Switch: Share anonymous stats, Settings → DATA. Details.
• Slime Wars — a daily report and screen-time batches. Switch: Share anonymous stats, Settings → Privacy, which stops both; turning Studio link off (Settings → Interface) stops both too. Details.
• Slime Merge — screen-time batches only. Switch: Anonymous stats, Settings → GAME. Details.
• Millworks and Slime Dominion build a statistics report and have nowhere to send it yet, so nothing is sent. Each has an ANONYMOUS STATS switch; Slime Dominion's is off by default.
• FrostRot and Stowage have no statistics at all.

Turning the switch off stops that game's statistics being sent. A few resets turn it back on — Slime Wars' RESTORE DEFAULTS, Slime Merge's reset and wipe, Pencil and Paper's "Start a fresh paper" — and each game's page says so.

What is sent

The daily report goes at most once a day, about a minute after the game starts, and contains:

• A random install id the game makes up on your machine the first time it prepares a report (only with the switch on) and then keeps. It is not derived from your Steam account, your hardware, a MAC address, or a hash of any of those — it is a random string. Turning the switch off does not delete it.
• The game's version, so a crash-prone build can be told from a fixed one.
• The platform as one word — the name the Unity engine gives it (WindowsPlayer, OSXPlayer, LinuxPlayer, Android) or, in Smokestack Valley, just desktop or android. A Steam Deck is not told apart. Nothing more specific than that.
• How many times the game has been opened, and how many minutes it has been open, in total.
• Minutes spent on each of the game's screens — this is the "which parts do people actually play" answer. (Slime Wars' daily report has none; its screen-time batches carry them.)
• Counters the game chooses, such as nights survived or puzzles solved. Each game's page names every one.

The screen-time batches (Slime Wars and Slime Merge) go about every two minutes while the game runs and when it closes, and carry the game's name, the kind of device, the version, and which screens were open, how often and for how long — under an id made fresh every time the game starts and never saved on your device.

What is not sent

• No name, username, email address or account of any kind. The statistics address most games use refuses a report carrying a field named like one of those, or any value shaped like an email address, and answers with an error saying so. Slime Wars' daily report goes to an older address that stores it as sent without that check; it carries no such field.
• No IP address is stored. It reaches our server with each request, as it does for any connection, and is held in memory for a few minutes to limit how often reports are accepted, then forgotten. No table has a column for it.
• Nothing you type. No chat, no search terms, and no bug-report or suggestion text travels with the statistics. (Bug reports you deliberately send from inside a game are a separate feature, and they carry what you wrote because that is the point of them.)
• Nothing from outside the game — no location, contacts, files, or other running programs.
• No advertising and no third-party analytics service runs in these games, and none of this is sold, rented or shared with anyone. Separately from our statistics: the Unity engine the games are built with can report basic hardware details and crashes to Unity, and games that use Steam tell Steam what Steam features need (Winter Is Here and Slime Wars report achievements; Slime Wars also reports playtime, kills, wins and losses to its Steam stats and leaderboards, and signs in to Unity's player accounts with your Steam login for its online features).

What we can actually see

Mostly charts. Per game, per day: how many installs were heard from and how many were new, total sessions and total minutes, which screens took the most time added up across everybody, which versions are still in the wild, and whether an install came back a day or a week later. For the games that send a daily report we also keep one record per install — its latest totals and the first and last day it was heard from — so we can tell one install from another, but not who is behind it: there is no name, account, Steam id, email or IP address anywhere in it. The screen-time batches keep no per-install record at all.

How long it is kept

• A daily total is kept for two years, then deleted.
• An install that has not been heard from for 400 days is deleted entirely.
• Slime Wars' latest whole daily report from each install is deleted 180 days after it last arrives.
• The per-launch id on a screen-time batch is kept for two to three days, only so one launch is not counted twice.

Roblox account verification

What we collect

• Your Discord user ID and username, when you use the /verify command in our Discord server.
• Your Roblox user ID and username, obtained through the Roblox OAuth 2.0 authorization flow with your explicit consent.
• The date and time the link was created.

How we use it

• To verify your identity for Roblox giveaways run in our community Discord server.
• To display your Roblox username to server moderators when delivering prizes.
• We do not sell, share, or transfer your data to any third party.

Data storage

Your Discord–Roblox link is stored in a private database hosted on Railway. Only the server owner (LostPhantom) has access to this database. You can request deletion at any time by running /unverify in our Discord server, which immediately removes your record.

Roblox OAuth

When you verify using Roblox OAuth, we receive a short-lived access token from Roblox and use it only to retrieve your Roblox user ID and username. We do not store the access token itself. We only request the openid and profile scopes — we cannot access your Roblox inventory, purchases, friends, or any other account data.

Contact

Questions? Message LostPhantom in our Discord server or email lostphantom03@gmail.com.

This service is an independent community project and is not affiliated with, endorsed by, or sponsored by Roblox Corporation. "Roblox" is a trademark of Roblox Corporation.