Spin the Wheel

Data deletion request

Delete your account and associated data. One email, one confirmation, done.

Last updated · July 2026

This page explains how to ask Spin The Wheel to delete your account and any personal data associated with it. It sits alongside your rights described in our privacy policy.

1. What we can actually delete

Because the wheel itself runs in your browser, most of what people think of as “their data” on the site never leaves their device in the first place. Concretely:

  • Your account record — the email address you signed up with and the display name you set. Yes, we delete this on request.
  • Your wheel entries, palettes, sounds, and spin results. These are stored only in your browser (localStorage). They are never sent to our servers, so there is nothing on our side to delete. To clear them, use the “Clear history” option in the history dropdown or reset your browser storage for the site.
  • Access logs that contain your IP address. Retained for up to 90 days for security investigations and then rotated out automatically.

2. How to request account deletion

Send an email to privacy@spinthewheel.biz from the address you signed up with. Include:

  • The subject line “Account deletion request”.
  • The email address on the account (which should match the address you are emailing from).
  • A short confirmation like: “I request deletion of my Spin The Wheel account and associated personal data.”

If you can’t email from the registered address (lost access, for example), let us know and we’ll ask for another way to verify that you own the account before we act.

3. What we do next

  1. We acknowledge the request within two business days.
  2. If the ownership check passes, we delete the account record from Firebase Authentication within seven days.
  3. Backup snapshots that were taken before the deletion request are rotated out within thirty days.
  4. Access logs referencing you are rotated on the 90-day cycle described in the privacy policy — we do not need a separate request for those.

4. What happens after deletion

  • You will not be able to sign in with the deleted email address.
  • You can create a new account with the same email in the future — the old record is gone, not soft-deleted.
  • Locally-stored wheel data on your own device is untouched by this process. Clear it manually if you want it gone.

5. Legal exceptions

We may retain a minimal record of the deletion event itself (date, hash of the address) so we can prove we honoured the request if audited. We may also retain data where we’re legally required to (for example, to respond to an active law-enforcement request that predates your deletion). These retentions are the exception, not the rule.

6. Related