Privacy Policy

1) Our Privacy Philosophy

ClickTheWheel is built with transparency and practical privacy in mind. We do not sell your personal information. Your wheel entries and results stay on your device when you use the app locally, and we do not use your wheel labels or winner text for analytics. To understand how the site is used and to improve the product, we use Google Analytics 4 (GA4), which collects aggregate usage and technical data as described below. We also use external services such as Supabase when you save wheels to your account, join live sessions, or use features that require synchronization.

2) Information We Collect

2.1) Data Stored Locally (Your Device)

When you use ClickTheWheel without sharing, all data is stored locally in your browser using localStorage and sessionStorage. This includes:

• Wheel entries: The list of items on your wheel (e.g., names, options, choices)
• Results history: A record of winners/selections from your spins
• Settings: Your color preferences, spin speed, confetti settings, and other customizations
• Wheel title: Any custom title you set for your wheel
• User ID: A randomly generated identifier stored in sessionStorage (per-tab, not shared across browser tabs)

Important: This local data never leaves your device unless you explicitly share your wheel. You can clear it anytime by clearing your browser's localStorage or using browser privacy settings.

2.2) Data Stored When Sharing (Supabase)

When you click "Share Wheel" and create a shareable link, we use Supabase (a third-party database service) to enable real-time synchronization. The following data is stored in Supabase:

• Room ID: A unique identifier for your shared room
• Host ID: Your user ID (randomly generated, not personally identifiable)
• Wheel data: Current entries, results, rotation state, and spin status (synchronized in real-time)
• User nicknames: Optional nicknames you and guests choose (e.g., "Joker" for host, "Guest0001" for guests)
• User activity timestamps: Last active time for each user (used to detect and remove inactive guests)
• Room metadata: Creation time, last update time

Data retention: Shared rooms are stored until you click "Stop Sharing" or the room becomes inactive. We do not automatically delete rooms, but you can delete them at any time. Rooms may be cleaned up by Supabase based on their retention policies.

2.3) Saved wheels and accounts (Supabase)

If you choose Save to My Wheels or sign in to manage saved wheels, we store the wheel data you save (for example title, entries, results, settings, and visibility) in your account on Supabase. You can set a saved wheel to public (so it may appear in Community Wheels) or private (only you can access it in My Wheels). We do not expose private wheel content in the community library.

2.4) Feedback Form Data

If you submit feedback through our feedback form, we collect:

• Your message (required)
• Name (optional)
• Email address (required, only used to reply)
• Feedback type (problem report, direct question, feature request, and more)
• Room ID (optional, if you're reporting an issue with a specific room)
• Page URL (optional, helps us understand context)
• Device / Browser (optional)

Feedback is stored privately in Supabase-backed support tables (if configured). We use this information solely to improve ClickTheWheel and respond to your inquiries.

3) How We Use Your Information

• Local data: Used solely to provide the wheel spinner functionality on your device. It is not sent to our servers unless you use account, community, live session, or feedback features that require it.
• Google Analytics 4: Used to measure aggregate traffic and product usage (for example page views and anonymized feature events). We configure events so they do not include your wheel entry text, winner names, or room codes.
• Shared room data: Used to synchronize wheel state, entries, and results in real-time between you and guests who join your shared link.
• Saved wheel data: Used to let you load and manage wheels you stored in your account, and to show public wheels in Community Wheels when you opt in.
• User activity: Used to detect inactive guests and automatically remove them from shared rooms to keep entries clean.
• Feedback: Used to improve ClickTheWheel, fix bugs, and respond to user inquiries.

We do NOT:

• Sell your personal information
• Use your wheel entry text or spin results inside Google Analytics
• Use feedback or saved-wheel content for ad profiling (that processing is separate from GA4 measurement)
• Share your private saved wheels publicly (only wheels you mark public appear in Community Wheels)
• Require an account for basic on-device spinning

4) Third-Party Services

4.1) Cloud infrastructure (AWS & Google Cloud)

ClickTheWheel is hosted using third‑party cloud infrastructure providers such as Amazon Web Services (AWS) and Google Cloud Platform (GCP). We rely on their security and resiliency capabilities (for example, redundancy, encryption features, monitoring, and access controls) as part of operating the service.

4.2) Supabase

ClickTheWheel uses Supabase (supabase.com) to power the real-time sharing feature. Supabase is a database and real-time synchronization service. When you share a wheel:

• Your wheel data is stored on Supabase servers
• Supabase handles real-time synchronization between host and guests
• Supabase's privacy policy applies to data stored on their platform
• Supabase uses industry-standard security measures and encryption

You can review Supabase's privacy policy at https://supabase.com/privacy.

4.3) Google Analytics 4 (GA4)

We use Google Analytics 4, a web analytics service provided by Google LLC(or the Google entity responsible in your region), to understand how visitors use ClickTheWheel (for example which pages are viewed, general usage patterns, and aggregate product interaction events). GA4 may use cookies or similar technologies and may collect information such as IP address (which may be used in truncated form), device and browser characteristics, general location derived from IP, and on-site engagement signals. Google processes this information according to Google's terms and privacy policy.

What we avoid sending to GA4: We do not intentionally send wheel entry labels, winner text, personal names you type into the wheel, email addresses, or live session room codes as analytics parameters. Custom events are limited to non-identifying counts and settings (for example number of segments or mode flags).

Your choices:You can use browser settings to block or delete cookies, use privacy-focused browsers or extensions, and read Google's information about GA data at https://policies.google.com/privacy and How Google uses information from sites that use its services. Google also provides an optional browser add-on for opting out of Google Analytics in supported browsers (availability may vary by browser).

Depending on your region, applicable privacy laws may provide additional rights regarding analytics and advertising; see Section 7 below.

4.4) Google AdSense (If Applicable)

If ClickTheWheel displays advertisements, we may use Google AdSense to serve and measure ads. Google and its partners may use cookies, device identifiers, and similar technologies to deliver ads, measure performance, limit how often you see an ad, and help detect fraud or abuse. Depending on your location and settings, ads may be personalized based on your activity on ClickTheWheel and/or other sites.

Where required by law, we will ask for your consent before enabling personalized advertising cookies. If you do not consent, you may still see ads, but they may be less relevant (for example, non-personalized or contextual ads).

You can manage your ad preferences (including opting out of personalized ads) by visiting Google's Ad Settings. You can also opt out of third-party vendor use of cookies by visiting Network Advertising Initiative opt-out page. For more information, see Google's Privacy Policy.

5) Cookies and Local Storage

ClickTheWheel uses localStorage and sessionStorage (browser storage technologies) to save your wheel configurations, entries, and settings. These are not cookies, but they function similarly in that they store data in your browser.

What we store:

• localStorage: Wheel entries, results, settings, entry mode preferences (persists across browser sessions)
• sessionStorage: User ID (per-tab, cleared when tab closes)

How to clear: You can clear this data anytime through your browser's settings (usually under "Clear browsing data" or "Privacy & Security"). Clearing localStorage will reset your wheel to default settings.

Analytics cookies / identifiers: Google Analytics 4 may set or read cookies or use similar storage (for example _gastyle identifiers) to distinguish visitors and measure engagement. These are first-party or Google tag-related technologies as described in Google's documentation.

Third-party cookies: If ClickTheWheel displays ads (for example via Google AdSense), advertising partners may set cookies or use similar technologies to serve and measure ads. We do not control third-party cookies directly, but you can manage or delete them using your browser settings, Google's Ad Settings, and industry opt-out tools.

6) Data Security

We take data security seriously:

• Local data: Stored securely in your browser using standard browser security mechanisms. Your browser's security settings protect this data.
• Shared room data: Transmitted over encrypted HTTPS connections. Supabase uses industry-standard encryption and security practices.
• No passwords: ClickTheWheel doesn't require accounts or passwords, reducing the risk of credential breaches.
• Room IDs: Room IDs are randomly generated and difficult to guess, providing a basic level of access control for shared rooms.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

7) Your Privacy Rights

You have the following rights regarding your data:

• Access: You can view all data stored locally in your browser's developer tools (localStorage/sessionStorage). For shared room data, contact us to request access.
• Deletion: Clear your browser's localStorage/sessionStorage to delete local data. For shared rooms, click "Stop Sharing" to delete the room. For feedback, contact us to request deletion.
• Opt-out and controls: You can use basic spinning without creating an account. You can block analytics or ad cookies in your browser, use the Google Analytics opt-out tools Google describes for your browser where available, and opt out of personalized ads via Google Ad Settings if ads are displayed.
• Correction: You can edit your wheel entries, settings, and results at any time. For feedback corrections, contact us.
• Portability: Your local data is stored in JSON format and can be exported through browser developer tools if needed.

8) Children's Privacy

ClickTheWheel is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information.

9) Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes. Changes are effective when posted on this page.

10) Contact Us

If you have any questions about this Privacy Policy, your data, or your privacy rights, please use our feedback form:

• Feedback form: /feedback