Privacy, explained without the legal fog

This policy covers the public ChoiceSpin website, the wheel running in your browser, locally saved wheels, private Share links, Spin With Friends rooms, result exports, and contact by email.

Hosted Share and live-room controls appear only when their separately protected services are active. Public Gallery publishing, accounts, advertising, and client-side analytics remain unavailable.

The current wheel uses browser storage so it can remember your work without an account.

• Wheel entries, advanced entry settings, visible-entry limits, and editing state
• Saved wheels in My Wheels, including names, appearance, options, and local images
• Uploaded wheel, center, background, and option images stored as local browser data
• Result history, including winner labels, timestamps, and sometimes slice colors
• Theme, colors, sound, spin duration, after-spin behavior, and other preferences
• Short-lived session recovery data used inside one browser-tab session

This data is not automatically uploaded to a ChoiceSpin account because the current site does not provide accounts or cloud sync.

Using any website creates ordinary network requests. ChoiceSpin is no exception.

• Website delivery: the hosting and content-delivery service can receive IP address, browser or user-agent information, requested URL, timing, and security-related request data.
• Private Share: when you create a link, ChoiceSpin sends the supported wheel project and your spin-or-copy choice to Google Firebase. The link is unlisted, not end-to-end encrypted, and works for anyone who has it for up to 24 hours.
• Spin With Friends: when you create or join a room, ChoiceSpin sends the room entries, settings, synchronized spins, optional chat messages, and short-lived presence information to Google Firebase. A room lasts for up to 6 hours and accepts no more than 32 active participants.
• Abuse protection: Share and live rooms use a session-only anonymous Firebase identity, Firebase App Check with reCAPTCHA Enterprise, request limits, and security logs. These are infrastructure identities, not public ChoiceSpin accounts.
• Contact email: the Contact page opens your email app. If you send a message, ChoiceSpin and the email providers involved receive your email address, message, and any attachment you choose.
• External share actions: if you click a social-share link, your browser connects to that chosen service under its own privacy terms.
• Static files: loading fonts, sounds, images, CSS, and JavaScript from ChoiceSpin creates normal same-origin website requests.

Opening or saving a local .wheel file uses the browser’s file tools. The file is not uploaded to ChoiceSpin by that action.

This table groups the information by what a person actually experiences.

Local browser data is used to provide the wheel features you request: restoring entries, keeping saved wheels, showing result history, and remembering settings.

Ordinary request data is handled to deliver, secure, troubleshoot, and maintain the website. Private Share and live-room data are handled to provide the hosted action you asked for and to prevent abuse. Email data is handled to respond to the message you chose to send.

Local storage has no timer that automatically deletes it. It remains until ChoiceSpin replaces it, you use an in-app delete or clear action, or the browser clears site data. Session storage normally ends with the tab session.

A Share link stops returning its wheel after 24 hours. A live room stops working after at most 6 hours. Google Firestore TTL deletion is not immediate and normally removes an expired document within about 24 hours after expiry. ChoiceSpin continues to enforce the shorter logical expiry while physical cleanup is pending. Share quota and retry records can remain for up to about 72 hours where a daily limit window and its cleanup buffer overlap.

Vercel provides website and server-function delivery. Google Firebase provides authentication, App Check, Firestore, and Realtime Database services used by the optional hosted features. The current Firestore databases use Google’s eur3 Europe multi-region. Provider logs, email records, and international-transfer details remain subject to the providers’ terms and the operator details still to be published below.

If those details matter before you use ChoiceSpin, contact us and ask for the current provider-specific answer.

You control the local wheel data directly. You can edit entries, clear results, delete saved wheels, export a wheel file, reset preferences, or clear ChoiceSpin site data in your browser.

Depending on the law that applies to you, you may also have rights to ask for access, correction, deletion, restriction, portability, or an objection to certain processing. You may withdraw consent where consent is the basis.

Send a request through the contact page. We may need enough information to understand and verify the request, but do not send passwords, identity documents, or unrelated sensitive data unless they are genuinely required.

You may also complain to the data-protection authority in the country or region where you live if that right applies.

ChoiceSpin is a general-audience wheel, not a student account platform. The current site does not ask students to create accounts.

A teacher can type student names into a local wheel and keep them on that device by using only local features. Choosing Share or Spin With Friends uploads the supported wheel content for the stated limited period. Adults should use placeholders where practical, follow school or organization policy, and never put confidential or sensitive student details in a hosted link or room.

A child who is not legally able to make privacy choices should use the service only with a responsible adult’s guidance.

Keeping wheel data local reduces the amount sent to ChoiceSpin, but it does not make the device itself private. Anyone with access to the browser profile may be able to see saved wheels or history.

• Lock shared devices and avoid saving sensitive wheels in a public browser profile.
• Keep a careful backup before clearing browser data.
• Do not send private data in a screenshot or support email unless it is needed.
• Treat every Share or room URL as a bearer link: anyone who receives or forwards it can use it until it is disabled, deleted, or expires.
• Private links are unlisted but not end-to-end encrypted. Do not include confidential, medical, financial, or sensitive student information.
• Remember that downloaded wheel files and editable shared copies can be kept or forwarded by their recipients.

ChoiceSpin may update this page when the product, providers, or legal requirements change. A meaningful change should update the date at the top and explain the new behavior plainly.

Enabling accounts, public Gallery publishing, ads, analytics, or materially different Share or live-room behavior requires a fresh privacy review, not a silent code change.

ChoiceSpin is responsible for this public privacy notice. Send privacy questions or rights requests to choicespin@gmail.com or use the contact page.