Privacy Policy

This policy explains which data we handle, why, for how long and what your rights are, under applicable data protection laws, such as the GDPR and the CCPA where they apply.

1. What data we handle

Data you enter in a draw: the parameters and the participant list. The list contains names of other people, which you enter on your own. Whoever enters names must have a legitimate reason to do so.

Account data, for Members: name, email and photo from the Google account, and the history of results linked to the account.

Customization plan data, for Subscribers: logo, colors and subscription status (status and period). Card details stay with Stripe and never pass through our system.

Technical access data, such as IP address and browser information, used for security, performance and usage measurement.

2. Purpose

The names in the list are handled for one purpose only: to run and prove the draw. We do not use them for marketing and we do not sell them. Account data is used to sign in and keep the history. Subscription data is used to provide and bill the customization plan.

3. Retention

Results created without an account are kept for 30 days and then deleted. Results linked to an account are kept while they remain in the Member's history. When you delete a result, the list data and the result link cease to exist. When you delete your account, the history and the linked results are deleted.

4. Name masking

On the result link, names in the list appear masked, so the result can be public without exposing participants. The name check lets a person verify that their name took part without revealing the others.

5. Who we share data with

Google: used for sign-in. We receive the name, email and photo of the account.

Stripe: processes billing for the customization plan. The location where Stripe stores payment data will be stated on this page before launch.

Google AdSense and ad partners: display ads to Visitors and Members. Subscribers do not see ads.

Hosting and database providers that operate the service, under contract and only for that purpose.

6. Cookies and consent

We use essential cookies for the site to work and, with your consent, cookies for personalized ads. On your first visit, the consent notice asks for your choice, and you may decline. Without consent, we do not load personalized ads. You can change your decision later through the same notice.

7. Your rights

Depending on where you live, you may request access, correction, deletion, restriction or portability of your data, object to processing and withdraw consent at any time. You may also lodge a complaint with your local data protection authority.

Members delete results and their own account directly in the service. Someone whose name was added to a list by others can ask for the result to be removed through the contact below, providing the result link.

8. Security

We adopt technical and organizational measures proportionate to the risk, such as encrypted connections and access control to data. No system is completely secure, and we will report incidents where the law requires it.

9. Children

The service is not directed at children. The participant list may include students' names: whoever enters it, such as a teacher, must have the necessary authorization.

10. Changes and contact

We may update this policy, and the version published here is the one in force. To exercise rights or ask questions, write to hello@spinthewheel.best.