Spin the Wheel

Privacy policy

What we collect, why, how long we keep it, and how to ask us to delete it.

Last updated · July 2026

This policy explains what Spin The Wheel (“we”, “us”) collects when you use spinthewheel.biz, why we collect it, and the choices you have. If anything below is unclear, please email privacy@spinthewheel.biz.

1. What we collect

Wheel content — not collected

The entries you add to a wheel, the palette you pick, the sounds you choose, and the results of each spin all stay in your browser. They are not sent to a server, not stored in our database, and not associated with any identifier we hold. Close the tab and, from our side, the wheel never existed.

Account data (optional)

If you create an account, we store the email address you registered with and the display name you set, both via Firebase Authentication. Your password is stored by Firebase using a salted hash — we never see the plaintext. Accounts do not currently unlock save-wheel or history features; see About us for the roadmap.

Technical logs

When your browser requests a page, our hosting provider (Firebase App Hosting on Google Cloud) records standard access logs: IP address, the URL requested, HTTP status code, user-agent string, and timestamp. These are used to debug outages, block abuse, and comply with security requirements. We do not use IP addresses to build a user profile.

Analytics

We may use privacy-respecting analytics to count aggregate page views and spot which wheels are popular. Analytics are aggregated and do not track individuals across sessions. If we add a personalisation feature that requires more, we will update this policy first and give you the option to opt out before it applies.

2. What we do not collect

  • Your entries, weights, palette, sounds, or spin results.
  • Precise location.
  • Contacts, calendar, camera, microphone, or health data.
  • Third-party tracking pixels for advertising networks.

3. Cookies

We use a small number of cookies for essential site functions. Details and controls are on the cookie policy page.

4. Third-party services

We use the following providers to run the site. Each processes only the data they need for the stated purpose.

  • Google Cloud / Firebase — hosting, database (accounts), authentication. Data centre location is set to a Google Cloud US region.
  • Cloudflare or equivalent CDN — page delivery and basic DDoS protection.

We do not sell, rent, or trade your data. When a legal request requires us to share data with law enforcement, we push back on overly broad requests and comply with what we’re required to.

5. Data retention

  • Wheel content: not retained. It never leaves your browser.
  • Account records: kept while your account exists. After account deletion, kept for up to 30 days in backup snapshots then removed.
  • Access logs: kept for up to 90 days for security investigations.

6. Your rights

Depending on where you live (UK, EU, California, and elsewhere) you may have the right to:

  • Ask what data we hold about you.
  • Correct inaccurate personal data.
  • Ask us to delete your account and associated data — see the data deletion request page.
  • Object to processing or ask to restrict it.
  • Complain to your local data-protection authority.

Email privacy@spinthewheel.biz to exercise any of these. We usually respond within seven days.

7. Children

The site is safe for classroom and family use, but our accounts feature is not intended for children under 13. If you believe a child under 13 has created an account, contact us and we’ll delete it.

8. Security

Traffic is served over HTTPS. Passwords are hashed by Firebase Authentication. Access to our infrastructure is limited to the small set of maintainers and secured with strong authentication.

No online service can guarantee absolute security. If you become aware of a vulnerability, email privacy@spinthewheel.biz with details so we can investigate.

9. Changes to this policy

We may update this policy as the product evolves. Material changes will be highlighted at the top of this page and, where a change affects existing account holders, we’ll email registered users.

10. Contact

Questions about privacy? privacy@spinthewheel.biz is the direct line. Everything else goes through our contact page.