Built to ask for as little as possible
Trombingo requests the minimum Slack permissions it needs, stores only what the game requires, and protects that data.
Sign in with Slack (OpenID Connect)
Authentication goes through Slack's standard OpenID Connect flow. We never see or store your Slack password.
Least-privilege scopes
The bot requests users:read (to list workspace members) and commands (for /trombingo). Sign-in uses OpenID Connect for your basic identity and email.
No permanent roster
Profile photos and names are fetched from Slack when you play. Shared round content is kept only on the active game session, then discarded when the game expires or the app is uninstalled.
Encrypted secrets
Slack bot tokens are encrypted at rest, and all traffic is served over HTTPS.
EU hosting
The app and its database run in the EU (France region), on Fly.io with a managed Neon PostgreSQL database.
Automatic deletion
Uninstalling Trombingo from a workspace notifies us instantly and deletes that workspace's data โ players, scores, games, and tokens.
What we store
- โข Your Slack user & workspace IDs, name, email, and profile photo URL, to identify you and link your workspaces
- โข Game scores, to power the leaderboards
- โข Names and photo URLs for an open game's shared rounds, deleted when the session expires or the app is uninstalled
- โข An encrypted bot token per workspace, to fetch members and run the slash command
What we don't
- โ No permanent copy of the workspace photo library
- โ No message or channel access
- โ No selling or sharing of your data
Responsible disclosure
Found a security issue? We appreciate responsible disclosure. Email security@trombingo.com with the details and we'll respond as quickly as we can.
Ready to test your memory?
Add Trombingo to your Slack workspace, then see how many teammates you can name.
Already installed? Sign in with Slack