Privacy Policy

This Privacy Policy explains how SpinWave (“we”, “us”, “our”) collects, uses, discloses and safeguards information when you visit this website. We have written it in plain language wherever possible. By using the site you agree to the practices described here. If you do not agree, please stop using the site.

1. Information we collect

Information you provide directly. If you send us a message through the contact form, we collect the name, email address and message content you submit, so that we can reply. If you press “Save & get link” on a wheel, we store the wheel title, the item labels and the colours you chose so the share link can rebuild that wheel later.

Information collected automatically. Like most websites, our server records standard technical data in its logs: IP address, browser type and version, operating system, referring page, pages requested, and the date and time of each request. This is used for security, abuse prevention and diagnosing faults.

Information we deliberately do not collect. Names, options or questions you type into any tool stay in your browser and are never transmitted to us, unless you explicitly save a wheel. We do not require an account, we do not ask for a date of birth, and we do not collect payment information because nothing on this site is for sale.

2. How we use information

• To operate, maintain and improve the website and its tools.
• To reply to enquiries you send us through the contact form.
• To rebuild a saved wheel when someone opens its share link.
• To monitor aggregate traffic patterns and understand which pages are useful.
• To detect, prevent and investigate abuse, spam and security incidents.
• To display advertising that keeps the site free to use.

We do not sell your personal information, and we do not share it with third parties for their own independent marketing purposes.

3. Google AdSense and the DoubleClick cookie

This site is supported by advertising served through Google AdSense. You should be aware of the following, which Google requires us to disclose:

• Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites.
• Google’s use of advertising cookies — including the DoubleClick DART cookie — enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the internet.
• You may opt out of personalised advertising by visiting Google Ads Settings. You can also opt out of a third-party vendor’s use of cookies for personalised advertising at aboutads.info/choices.
• Third-party ad networks other than Google may also serve ads through our ad slots and may set their own cookies. We do not control those cookies.

Advertising and analytics scripts only load after you accept cookies in our consent banner. If you decline, those scripts are not loaded at all and the site continues to work normally.

4. Google Analytics

Where enabled, we use Google Analytics 4 to understand aggregate usage: which pages are visited, roughly where visitors come from, and which devices they use. Google Analytics sets cookies and processes data on our behalf. We enable IP anonymisation, and we never send personally identifying information such as names or email addresses to Analytics. You can prevent Analytics entirely by declining cookies in our banner, or by installing the Google Analytics opt-out browser add-on.

5. Cookies and similar technologies

We use three categories of storage:

• Strictly necessary storage. A local storage entry that remembers your cookie choice, a preference entry that remembers light or dark mode, and — only if you sign in to the private admin area — a secure session cookie. These are required for the site to function and are not used for tracking.
• Analytics cookies. Set by Google Analytics, only after you accept.
• Advertising cookies. Set by Google AdSense and its partners, only after you accept.

You can clear or block cookies at any time in your browser settings, and you can change your mind about consent by clearing this site’s data and reloading the page.

6. Data retention

Contact messages are kept for as long as needed to handle your enquiry and to maintain a record of correspondence, and are deleted on request. Saved wheels are kept so their share links keep working; tell us the link and we will delete it. Server logs are rotated and discarded on a rolling basis.

7. Your rights under GDPR

If you are in the European Economic Area or the United Kingdom, you have the right to: request access to the personal data we hold about you; request rectification of inaccurate data; request erasure (the “right to be forgotten”); request restriction of processing; object to processing carried out on the basis of legitimate interests; and request portability of data you provided to us, in a structured, machine-readable format. Where processing is based on consent — as it is for analytics and advertising cookies — you may withdraw that consent at any time without affecting the lawfulness of processing carried out beforehand. You also have the right to lodge a complaint with your national supervisory authority.

To exercise any of these rights, email admin@spinwave.com. We respond within 30 days and do not charge a fee for reasonable requests.

8. Your rights under the CCPA

If you are a California resident, you have the right to know what categories of personal information we collect and the purposes for which they are used, the right to request deletion of personal information we have collected from you, the right to opt out of the sale or sharing of personal information, and the right not to be discriminated against for exercising any of these rights. We do not sell personal information as that term is defined by the CCPA, and we do not knowingly share it for cross-context behavioural advertising beyond the advertising cookies described in section 3, which you control through our consent banner. Submit requests to admin@spinwave.com with “CCPA request” in the subject line.

9. Children’s privacy (COPPA)

This site is intended for a general audience and is not directed at children under 13. We do not knowingly collect personal information from children under 13. We are aware that teachers use our tools in classrooms; the tools themselves require no personal information from students, and names typed onto a wheel are not transmitted to us unless a wheel is deliberately saved. If you believe a child under 13 has provided us with personal information, contact admin@spinwave.com and we will delete it promptly.

10. Security

We use HTTPS in transit where available, keep the software stack patched, and restrict administrative access to the site. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we do not hold sensitive categories of data in the first place.

11. International transfers

Our servers and our service providers (including Google) may process data outside your country of residence. Where required, transfers rely on appropriate safeguards such as the European Commission’s standard contractual clauses.

12. Changes to this policy

We may update this policy to reflect changes in our practices or in the law. The “last updated” date at the top of this page always shows the current version, and material changes will be highlighted on the site.

13. Contact us

For privacy questions, data access requests or deletion requests, email admin@spinwave.com or use the contact form. Please include enough detail for us to identify the data concerned — for example, the share link of a saved wheel.