What you're looking at

What happens automatically

Every slop runs under these rules. They are enforced by your browser, not by trust.

• It cannot touch your Slop account. Uploaded pages run on a separate domain, so a slop cannot read your session, act as you, or see anything in your dashboard.
• It cannot take over the tab. A slop cannot redirect the page you are on to somewhere else, so the address bar keeps telling you the truth.
• No camera, microphone, or location. Those are switched off, along with payment handlers and USB access. A page asking for them will simply be refused.
• Forms cannot submit to another site. If a page collects what you type and tries to send it elsewhere, the browser blocks the request.
• Every upload is scanned. Known cryptocurrency miners and login forms that post to another site are refused outright. Other findings, like code assembled at runtime or contact with outside servers, are recorded and shown to whoever owns the slop.

What none of that covers

Scanners can be fooled by code written to fool them. The rules above hold regardless, but they do not make a page honest.

• A slop can still display anything, claim anything, and ask you for anything.
• It can look exactly like a site you recognise. Looking real is easy.
• Links inside it can lead anywhere, including off Slop entirely.
• It can load images and scripts from other services, which will see your IP address.

Something looks wrong

Copy the address of the slop and send it in. Every slop names the account that uploaded it, at the top of the page and on that person's profile, so include that too if you can.

Report a slop