Privacy policy

Wheels, entry lists, class lists, results history, preferences and saved dice rolls are stored in your own browser (IndexedDB and localStorage). They are not sent to us. Clearing your browser data deletes them. Images you add to a wheel are resized on your device and stay there unless you share the wheel.

Spinvolta runs a small server only for features that need one:

• Shared wheels — when you create a share link, we store the wheel you chose to share (title, entries, settings and images if included) and a one-way hash of your private edit token. Shared wheels are deleted 12 months after they were last viewed, or immediately when you delete the link.
• Live rooms — the room title, the display names and emoji participants type, a random device identifier created by their browser (used for “one entry per device”), and the list of winners. Rooms are deleted automatically 6 hours after the last activity.
• Giveaway proofs — the entry list you drew from (for example public usernames), the fingerprint, seed, settings, winners and timestamps, so that anyone with the link can verify the draw. Proofs are kept for 24 months.
• Abuse reports — the link reported and the reason, for 90 days.
• Template counters — an anonymous “+1” per template view, with no identifiers, used for the Trending list.

We don't have accounts or user profiles. IP addresses are used transiently for rate limiting (as a one-way hash, in memory) and are not written to our database. Stream overlays connect directly from your browser to Twitch chat; we don't receive chat messages. When you fetch YouTube comments, our server forwards the request to the YouTube Data API and passes the public comments to your browser without keeping them.

• drand (League of Entropy): for provably fair draws your browser downloads public randomness from drand endpoints such as api.drand.sh and drand.cloudflare.com, which can see your IP address like any website.
• YouTube Data API (Google): used only when you fetch comments. Google's privacy policy applies to YouTube.
• Twitch: the stream overlay reads public chat anonymously.
• Hosting and CDN: our providers process technical request data to deliver the site.

If analytics are enabled on this site, we use Google Analytics 4 with Consent Mode: nothing is stored until you agree, IP addresses are anonymised, Google signals are off, and we only send events such as “spin”, “tool used” or “share created” with coarse counts. We never send entries, names, comments or images.

Spinvolta may show ads in the future to stay free. Ads would appear only on content pages, never on the wheel, in rooms, in the classroom projector view, in embeds, on proof pages or on Secret Santa reveals. Personalised ads would require your consent (and are never shown on classroom pages). You can change your choices any time on the cookie settings page. We honour Global Privacy Control as an opt-out of personalised ads.

Spinvolta is used in classrooms. Classroom tools keep class lists on the teacher's device, the projector view shows no ads, and we don't knowingly collect personal data from children. Teachers should use first names or nicknames in live rooms.

Depending on where you live (for example under the GDPR, UK GDPR or US state privacy laws) you can ask to access, correct or delete personal data, object to processing and withdraw consent. Because we don't have accounts, most data lives on your own device and you control it directly. For anything stored on our server — a share link, a room or a proof — contact us with the link and we'll help.

Questions about privacy? Use the contact page.