Privacy Policy

This Privacy Policy explains how SpinWheelPlus ("SpinWheelPlus", "we", "us", or "our") handles personal information when you use our website and related online services that display this policy- including spin wheels and templates, mystery boxes, random decision tools, embeddable widgets, blogs, dashboards, and other features we offer (collectively, the "Services"). By using the Services, you acknowledge this Policy together with our Terms of Service. If you do not agree, please do not use the Services.

We may update this Policy when our practices or the law change. The "Last updated" date at the top reflects the latest revision. Material changes may be communicated as described in the "Changes" section below.

The categories below depend on how you use SpinWheelPlus. We only collect what is reasonably needed for the purposes in this Policy.

• Account and profile: such as email address, display name, and credentials you provide when you register or sign in (including Sign in with Google), plus settings tied to your profile or dashboard (where available). When you use Google sign-in, Google may share profile information with us as permitted by your Google account settings; Google's use of your data is governed by Google's privacy policies.
• Content and usage: wheels, mystery boxes, templates, titles, images, or text you upload or configure; interactions with editors, previews, embeds, and random tools; spin or open results where those features are enabled; favorites or lists you save; and approximate usage patterns that help us keep the product reliable.
• Device and technical data: IP address (or truncated where we hash or minimize it), browser type, device type, operating system, locale, referrer URL, and diagnostic data such as error logs-with timestamps-to secure the Services and troubleshoot issues.
• Communications: the contents of messages you send us (for example support requests), your contact preferences, and metadata needed to respond and prove delivery where appropriate.
• Cookies and similar technologies: identifiers stored on your device as described in our Cookie Policy.

We use personal information to:

• Provide, host, and improve the Services-including authentication, saving your wheels, mystery boxes, and templates, and delivering pages, embeds, and APIs you request.
• Maintain security and integrity: fraud prevention, abuse detection, rate limiting, and protecting users, our infrastructure, and third parties.
• Communicate with you about your account, updates, support, and-where permitted-marketing or product news (you can opt out of non-essential email where the law or our tools allow).
• Analyze aggregated or de-identified usage to understand feature adoption, fix bugs, and plan improvements-including through Google Analytics when you have consented or the law permits.
• Comply with applicable law, respond to lawful requests, and enforce our Terms of Service.

Where the GDPR, UK GDPR, or similar laws apply, we rely on one or more of the following legal bases (in addition to any others required in your region):

• Performance of a contract: processing necessary to provide the Services you request (for example account login and storing your creations).
• Legitimate interests: for example securing our systems, improving the product in ways you would expect, and communicating about similar services-balanced against your rights.
• Consent: where required for non-essential cookies (such as analytics or advertising), certain marketing, or other processing we offer with an explicit choice. You may withdraw consent at any time where our tooling or browser settings allow.
• Legal obligation: where we must retain or disclose data to comply with law or cooperate with competent authorities.

We share personal information only as described here or with your direction. We do not sell your personal information in the conventional sense of selling lists for unrelated third-party marketing. Where "sale" or "sharing" has a specific legal meaning (for example under U.S. state laws), we describe compatible choices in "Your rights" and in any in-product notice required for your region.

We may disclose information to: service providers that host infrastructure, send email, store or deliver images (for example Cloudinary), provide sign-in or identity services (for example Google when you choose Google sign-in), supply stock or search imagery (for example Unsplash), measure site usage (for example Google Analytics), or deliver and measure ads (for example Google AdSense), or help us operate the Services under contracts that require appropriate safeguards; professional advisers where permitted; a successor in a merger, acquisition, or asset sale (with notice where required); and law enforcement or other parties when we reasonably believe disclosure is necessary to comply with law, protect rights, or investigate fraud or abuse.

We use cookies, local storage, and related technologies for essential functions (such as session security and sign-in), preferences (such as theme), anonymous visitor identifiers, and-with your consent or where allowed- measurement through Google Analytics and advertising through Google AdSense. Category details and storage keys are in our Cookie Policy. You can control many cookies and local storage entries through your browser or device settings and, where we display one, a cookie or consent notice for your region.

We retain personal information only as long as needed for the purposes in this Policy, including providing the Services, resolving disputes, and satisfying legal, accounting, or reporting requirements. Retention periods vary: for example, account data is kept while your account is active and for a reasonable period afterward; backups and logs may be retained for a limited window for security and disaster recovery; and some records must be kept longer where the law requires.

When data is no longer necessary, we delete or de-identify it in line with our internal processes and applicable rules.

Depending on your location, you may have rights such as access, rectification, erasure, restriction of processing, data portability, objection to certain processing, withdrawal of consent, and the right to lodge a complaint with a supervisory authority. We will respond within the timeframe required by law when you submit a verifiable request.

To exercise rights or ask questions, use our contact page. You may need to verify your identity before we process sensitive requests. If an automated decision with legal effect is ever used in a way that affects you, applicable law may give you additional rights-we will describe them in context if that situation arises.

SpinWheelPlus may process and store information in the United States and in other countries where we or our service providers operate. Those countries may have different data protection rules than your home jurisdiction. When we transfer personal data from the EEA, UK, Switzerland, or other regions that require safeguards, we use mechanisms such as standard contractual clauses, supplementary measures where appropriate, or other lawful transfer tools.

We implement administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, or alteration-such as encryption in transit where appropriate, access controls, monitoring, and vendor due diligence. No system is completely secure; please use a strong password and protect your credentials.

The Services are not directed at children under 13 (or the higher age required in your country for consent to online services). We do not knowingly collect personal information from children below that age. If you believe we have collected such information, please contact us and we will take appropriate steps to delete it.

We may revise this Privacy Policy to reflect changes to our Services, practices, or law. We will update the "Last updated" date and, where required, provide additional notice (for example by email to your account address or a banner on the site). Your continued use after the effective date of changes constitutes acceptance unless applicable law requires explicit consent for specific new processing.

For privacy-related requests or questions about this Policy, please use the contact options on SpinWheelPlus. For general legal notices that are not privacy-specific, you may also consult our Disclaimer.