Privacy, explained without the legal fog

This policy covers the public ChoiceSpin website, the wheel running in your browser, locally saved wheels, private Share links, Spin With Friends rooms, result exports, and contact through the form or email fallback.

Hosted Share and live-room controls appear only when their separately protected services are active. Public Gallery publishing, accounts, advertising, Google Analytics, and Vercel Speed Insights remain unavailable. Cookie-free Vercel Web Analytics is limited to eligible exact canonical, indexable public pages and does not run on this legal page.

The current wheel uses browser storage so it can remember your work without an account.

• Wheel entries, advanced entry settings, visible-entry limits, and editing state
• Saved wheels in My Wheels, including names, appearance, options, and local images
• Uploaded wheel, center, background, and option images stored as local browser data
• Result history, including winner labels, timestamps, and sometimes slice colors
• Theme, colors, sound, spin duration, after-spin behavior, and other preferences
• Short-lived session recovery data used inside one browser-tab session

This data is not automatically uploaded to a ChoiceSpin account because the current site does not provide accounts or cloud sync.

Using any website creates ordinary network requests. ChoiceSpin is no exception.

• Website delivery: the hosting and content-delivery service can receive IP address, browser or user-agent information, requested URL, timing, and security-related request data.
• Anonymous site measurement: on an eligible exact canonical, indexable public page with no query string or fragment, ChoiceSpin loads Vercel Web Analytics. Vercel records an anonymous page view for aggregated statistics, including the canonical page URL, event time, an origin-only referrer when the browser supplies one, approximate location, device type, operating system, and browser. It uses no analytics cookies. ChoiceSpin does not send wheel entries or custom events through this integration. The runtime refuses path-, query-, or fragment-bearing referrers from any origin and does not load on legal, private, noindex, raw-generated, query, fragment, or preview surfaces.
• Private Share: when you create a link, ChoiceSpin sends the supported wheel project and your spin-or-copy choice to Google Firebase. The link is unlisted, not end-to-end encrypted, and works for anyone who has it for up to 24 hours.
• Spin With Friends: when you create or join a room, ChoiceSpin sends the room entries, settings, synchronized spins, optional chat messages, and short-lived presence information to Google Firebase. A room lasts for up to 6 hours and accepts no more than 32 active participants.
• Abuse protection: Share and live rooms use a session-only anonymous Firebase identity, Firebase App Check with reCAPTCHA Enterprise, request limits, and security logs. These are infrastructure identities, not public ChoiceSpin accounts.
• Contact form: when you press Send, the email address and description you entered go directly to FormSubmit with fixed delivery metadata (subject, template, page URL, and the anti-spam honeypot value) plus ordinary request and security data. FormSubmit forwards the message to ChoiceSpin's email inbox, applies its own spam checks, and may require a CAPTCHA. If you use the direct-email fallback instead, your email provider and ChoiceSpin's email provider handle the message.
• External share actions: if you click a social-share link, your browser connects to that chosen service under its own privacy terms.
• Static files: loading fonts, sounds, images, CSS, and JavaScript from ChoiceSpin creates normal same-origin website requests.

Opening or saving a local .wheel file uses the browser’s file tools. The file is not uploaded to ChoiceSpin by that action.

This table groups the information by what a person actually experiences.

Local browser data is used to provide the wheel features you request: restoring entries, keeping saved wheels, showing result history, and remembering settings.

Ordinary request data is handled to deliver, secure, troubleshoot, and maintain the website. Anonymous Vercel Web Analytics data is handled to understand aggregate visits, page popularity, and traffic sources without creating a cross-site profile. Private Share and live-room data are handled to provide the hosted action you asked for and to prevent abuse. Contact-form or email data is handled to deliver and respond to the message you chose to send.

Local storage has no timer that automatically deletes it. It remains until ChoiceSpin replaces it, you use an in-app delete or clear action, or the browser clears site data. Session storage normally ends with the tab session.

A Share link stops returning its wheel after 24 hours. A live room stops working after at most 6 hours. Google Firestore TTL deletion is not immediate and normally removes an expired document within about 24 hours after expiry. ChoiceSpin continues to enforce the shorter logical expiry while physical cleanup is pending. Share quota and retry records can remain for up to about 72 hours where a daily limit window and its cleanup buffer overlap. Public Gallery removal protection uses one separate persistent, fixed-size record per hashed Firebase owner identity. It stores no raw Firebase UID, is overwritten in place, and has no automatic TTL while that protection is retained.

Vercel provides website and server-function delivery and the limited Web Analytics service described above. Its analytics visitor hash resets daily, while aggregate reporting follows Vercel's current service retention. Google Firebase provides authentication, App Check, Firestore, and Realtime Database services used by the optional hosted features. The current Firestore databases use Google’s eur3 Europe multi-region. FormSubmit processes contact-form submissions and states that it retains them for 30 days. Provider logs, delivered email records, and international-transfer details remain subject to the providers' terms and the operator details still to be published below.

If those details matter before you use ChoiceSpin, contact us and ask for the current provider-specific answer.

You control the local wheel data directly. You can edit entries, clear results, delete saved wheels, export a wheel file, reset preferences, or clear ChoiceSpin site data in your browser.

Depending on the law that applies to you, you may also have rights to ask for access, correction, deletion, restriction, portability, or an objection to certain processing. You may withdraw consent where consent is the basis.

Send a request through the contact page. We may need enough information to understand and verify the request, but do not send passwords, identity documents, or unrelated sensitive data unless they are genuinely required.

You may also complain to the data-protection authority in the country or region where you live if that right applies.

ChoiceSpin is a general-audience wheel, not a student account platform. The current site does not ask students to create accounts.

A teacher can type student names into a local wheel and keep them on that device by using only local features. Choosing Share or Spin With Friends uploads the supported wheel content for the stated limited period. Adults should use placeholders where practical, follow school or organization policy, and never put confidential or sensitive student details in a hosted link or room.

A child who is not legally able to make privacy choices should use the service only with a responsible adult’s guidance.

Keeping wheel data local reduces the amount sent to ChoiceSpin, but it does not make the device itself private. Anyone with access to the browser profile may be able to see saved wheels or history.

• Lock shared devices and avoid saving sensitive wheels in a public browser profile.
• Keep a careful backup before clearing browser data.
• Do not send private data through the contact form or in a support email unless it is needed.
• Treat every Share or room URL as a bearer link: anyone who receives or forwards it can use it until it is disabled, deleted, or expires.
• Private links are unlisted but not end-to-end encrypted. Do not include confidential, medical, financial, or sensitive student information.
• Remember that downloaded wheel files and editable shared copies can be kept or forwarded by their recipients.

ChoiceSpin may update this page when the product, providers, or legal requirements change. A meaningful change should update the date at the top and explain the new behavior plainly.

Enabling accounts, public Gallery publishing, ads, analytics storage, custom analytics events, broader measurement, or materially different Share or live-room behavior requires a fresh privacy review, not a silent code change.

ChoiceSpin is responsible for this public privacy notice. Send privacy questions or rights requests to choicespin@gmail.com or use the contact page.