Privacy Policy

1. Information We Collect

The information we collect depends on how you use SpinIt and which features are enabled.

1.1 Information you provide

• your email address, display name, profile details, account preferences, and authentication information;
• wheel titles, entries, labels, descriptions, colours, themes, settings, and other wheel content;
• images, logos, backgrounds, audio, or other supported media that you choose to upload;
• information you submit through forms or interactive activities made available through SpinIt;
• support requests, feedback, reports, and communications with us;
• subscription, billing, or transaction information if paid features are offered and you purchase them; and
• any other information you voluntarily provide.

You are responsible for ensuring that you have the necessary authority, permission, or other lawful basis to submit information about another person.

1.2 Information collected automatically

• IP address and approximate location derived from it;
• browser, device, operating system, language, and screen information;
• referring pages, pages visited, access dates and times, and feature interactions;
• events relating to loading, saving, editing, sharing, or spinning wheels;
• cookie, session, device, and advertising identifiers;
• error, diagnostic, performance, security, and abuse-prevention information; and
• information about ad impressions or interactions where advertising is displayed.

We seek to limit telemetry and diagnostic information to what is reasonably necessary for service operation, security, measurement, and improvement.

2. Information in Wheels and User Content

Wheel entries may contain names, words, choices, numbers, images, or other content selected by the person creating the wheel. SpinIt does not require wheel entries to identify anyone, but users may choose to include personal information.

When you include another person’s information, you are responsible for giving any required notice, obtaining any necessary permission, limiting the information to what is appropriate, and deleting it when it is no longer needed.

Do not use SpinIt to store passwords, payment-card numbers, government identification numbers, detailed medical records, biometric data, or other highly sensitive information. Use initials, nicknames, numbers, or non-identifying labels where practical.

3. Browser Storage and Anonymous Use

3.1 Information stored on your device

SpinIt may use local storage, IndexedDB, session storage, cookies, or similar browser technologies to save wheels on your device, remember preferences, maintain sessions, support security, record privacy choices, and improve performance.

A wheel saved only in your browser generally remains on that device. It may be lost if you clear browser data, use private browsing, uninstall or reset the browser, or change devices. We may be unable to recover locally stored wheels.

3.2 Anonymous use

Some features may be used without an account. We may assign a temporary or pseudonymous identifier to maintain a session, associate a shared wheel or uploaded asset, enforce limits, prevent abuse, apply rate limits, and manage deletion or expiry. This identifier may be associated with technical information such as your device, browser, cookie, session, or IP address.

Anonymous content may have shorter retention periods or lower storage and usage limits than account content.

4. Accounts, Authentication, and Social Login

4.1 SpinIt accounts

If you create an account, we may process your email address, account identifier, profile information, email-verification status, authentication records, account status, login timestamps, and security events. Passwords are handled through our authentication provider and are not stored by SpinIt in readable form.

4.2 Third-party and social login

When enabled, SpinIt may allow you to sign in through a provider such as Google, Apple, Facebook, Microsoft, or another supported identity provider. The provider may share information permitted by your settings and the permissions you approve, such as your name, email address, profile image, unique provider identifier, and email-verification status. SpinIt does not receive your password for that provider.

We use this information to create or link your SpinIt account, authenticate you, maintain your session, reduce fraud or duplicate accounts, and support account recovery. The identity provider separately processes information under its own terms and privacy policy.

You may revoke SpinIt’s access through the provider’s connected-app or security settings. Revoking access may stop future login through that provider, but it does not automatically delete your SpinIt account or information already received. Before disconnecting your only login method, add another supported sign-in method where available.

5. Cloud Storage and Uploaded Media

Account holders may be able to save wheels and related assets to the cloud and access them from different devices. Depending on the feature used, we may store:

• your account identifier and email address;
• saved wheel content, settings, version information, and timestamps;
• uploaded media and metadata such as file name, type, size, and object path;
• the relationship between an asset, a wheel, and an account or anonymous session;
• sharing records, access tokens, expiry or revocation information;
• storage usage, quota, and lifecycle information; and
• audit, moderation, security, and deletion records.

SpinIt may validate, resize, optimise, quarantine, reject, or remove files for security, legal, technical, or operational reasons. Storage, upload, file-type, and usage limits may differ for anonymous, registered, free, or paid users.

You must not upload content that infringes another person’s rights, contains malware or unlawful material, exploits children, or violates the SpinIt Terms of Use.

6. Shared Wheels and Public Links

SpinIt may let you share a wheel through a link, token, QR code, or similar mechanism. Anyone who receives or obtains an active sharing link may be able to view or interact with the shared content, depending on the available settings.

Shared content may include the wheel title, entries, design, instructions, and uploaded media. Treat a sharing link as potentially accessible to others and do not include confidential, private, or sensitive information.

SpinIt may use unguessable identifiers, expiry, revocation, access controls, or rate limits, but no sharing method can prevent a recipient from copying, screenshotting, recording, or redistributing content. Publicly accessible content may also be indexed or cached by third parties where technically permitted.

Deleting or revoking a sharing link prevents future access through that link where supported, but it cannot remove copies already made outside SpinIt.

7. How We Use Information

We may use information to:

• provide, operate, maintain, and improve SpinIt;
• create and manage accounts, authenticate users, and maintain sessions;
• save, load, edit, share, and delete wheels and uploaded assets;
• enforce storage, upload, feature, and rate limits;
• provide free, premium, or subscription features;
• display, select, measure, and protect advertising;
• understand service usage and performance;
• diagnose errors and provide support;
• prevent fraud, spam, abuse, automated attacks, and security incidents;
• enforce our Terms of Use and other policies;
• send service, security, account, and support communications;
• comply with legal obligations and lawful requests; and
• protect SpinIt, our users, and others.

We may aggregate or de-identify information so that it no longer reasonably identifies an individual, and use it for analytics, research, security, service improvement, and business planning.

8. Legal Bases for Processing

Where applicable law requires a legal basis, we rely on one or more of the following:

• Contract: to provide the service you request, manage your account, save or share your wheels, process a purchase, or provide support;
• Legitimate interests: to operate, secure, improve, measure, and support SpinIt, prevent misuse, and maintain an advertising-supported service, balanced against your rights;
• Consent: for non-essential cookies, personalised advertising, certain analytics, marketing communications, or other processing where consent is required; and
• Legal obligation: to comply with law, court orders, regulatory requirements, tax obligations, or lawful government requests.

Where we rely on consent, you may withdraw it through the available privacy settings or by contacting us. Withdrawal does not affect processing that occurred before it was withdrawn.

9. Google Advertising

SpinIt is a freemium service. Free access may be supported by advertising, including Google AdSense, Google Ad Manager, or related Google advertising services.

Google and its advertising partners may use cookies, web beacons, IP addresses, device or advertising identifiers, and similar technologies to display ads, select contextual or personalised ads, limit frequency, measure impressions and interactions, detect invalid traffic and fraud, and generate reports.

Where required, SpinIt will request consent before enabling non-essential advertising technologies or personalised advertising. Declining personalised advertising does not necessarily remove ads; you may still receive contextual or non-personalised ads based on factors such as the page, general location, or time.

You can learn more through Google’s Privacy & Terms (policies.google.com/privacy) and manage personalisation through Google Ads Settings (adssettings.google.com).

Google and other advertising providers process information under their own policies. SpinIt does not control all information they collect directly.

10. Cookies and Similar Technologies

SpinIt and its service providers may use cookies, local storage, pixels, software development tools, and similar technologies for the following categories:

10.1 Essential

Required for authentication, session management, security, fraud prevention, load balancing, privacy choices, and requested functionality. Blocking these technologies may prevent parts of SpinIt from working.

10.2 Preferences

Used to remember settings such as language, theme, sound, accessibility, display, and wheel preferences.

10.3 Analytics and performance

Used to understand feature usage, navigation, errors, reliability, and performance. Where required, non-essential analytics will be used only after consent.

10.4 Advertising

Used to display, select, personalise, limit, protect, and measure ads. Where required, these technologies are enabled only after a valid privacy choice.

10.5 Your controls

You may manage choices through SpinIt’s cookie or privacy controls, your browser settings, Google Ads Settings, and recognised industry opt-out tools. Disabling technologies may affect login, saved preferences, sharing, and other features.

11. Analytics, Security, and Performance Monitoring

We may use hosting, database, analytics, security, content-delivery, email, and error-monitoring providers. Depending on the service and your choices, these providers may process IP address, device and browser details, page and feature interactions, session identifiers, performance timings, errors, diagnostic events, and security signals.

We aim to avoid including wheel item names, private wheel content, or sensitive snapshots in routine telemetry unless necessary to investigate a specific issue, comply with law, or respond to a user request.

12. Payments and Premium Features

SpinIt may introduce premium subscriptions, paid features, or additional storage. If you make a purchase, a third-party payment provider may process your payment information. SpinIt may receive your name, email address, customer and transaction identifiers, plan, payment status, billing country, amount, currency, renewal or cancellation information, and limited payment-method details such as card brand and last four digits.

SpinIt generally does not receive or store full payment-card numbers. Payment providers process payment information under their own policies and legal obligations.

13. How We Disclose Information

13.1 Service providers

We may disclose information to providers that support hosting, database and cloud storage, authentication and social login, content delivery, email, analytics, advertising, payments, support, moderation, security, and error monitoring. They process information for the services they provide to us, subject to applicable contractual and legal obligations.

13.2 Other users and the public

Information included in a shared wheel is disclosed to recipients of the link and, where a wheel is publicly accessible, potentially to the public.

13.3 Legal, safety, and enforcement

We may disclose information when we reasonably believe it is necessary to comply with law or legal process, investigate unlawful activity or security incidents, prevent harm, enforce our terms, protect rights or property, or establish, exercise, or defend legal claims.

13.4 Business transfers

If SpinIt is involved in a merger, acquisition, financing, restructuring, sale of assets, insolvency, or similar transaction, information may be transferred as part of that transaction, subject to applicable law.

14. Sale, Sharing, and Targeted Advertising

SpinIt does not sell personal information for money. Some privacy laws define the use of advertising cookies or disclosure of online identifiers to advertising partners as a “sale”, “sharing”, or targeted or cross-context behavioural advertising.

Where those laws apply, you may have the right to opt out through SpinIt’s privacy controls. We will respond to legally recognised opt-out preference signals, such as Global Privacy Control, where required and technically supported.

15. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including to provide the service, maintain security, resolve disputes, enforce agreements, and meet legal, tax, accounting, or regulatory obligations.

Retention depends on whether you have an account, whether content is stored locally or in the cloud, whether a sharing link remains active, whether an asset remains linked to a wheel, applicable quotas, fraud-prevention needs, and backup cycles.

• locally saved wheels remain until you or the browser removes them;
• cloud wheels and account content generally remain until deleted, the account is closed, or an applicable retention rule is triggered;
• unreferenced, abandoned, temporary, incomplete, expired, or quota-exceeding assets may be deleted automatically;
• expired or revoked sharing and security records may be retained for a limited period for audit, abuse prevention, or legal needs;
• backup copies may remain until they are overwritten or expire under the applicable backup schedule; and
• aggregated or de-identified information may be retained for longer where it no longer reasonably identifies a person.

16. Deletion of Wheels, Assets, and Accounts

You may delete saved wheels and revoke sharing links using available controls. Deleting a wheel may also schedule related assets and sharing records for deletion, unless they remain linked to other content or must be retained for security, legal, or operational reasons.

Registered users may request account deletion. Deletion may remove profile information, cloud wheels, uploaded assets, and active sharing links, subject to limited retention for legal obligations, fraud prevention, dispute resolution, security, and backups.

Deleting information from SpinIt does not delete copies downloaded, screenshotted, cached, recorded, or redistributed outside SpinIt. It also does not remove browser-only content from another device unless that browser data is separately cleared.

17. Data Security

We use reasonable administrative, technical, and organisational measures designed to protect information. Measures may include encrypted connections, authentication and authorisation controls, database access policies, restricted administrative access, logging and monitoring, file validation, storage quotas, rate limits, backups, recovery procedures, and security reviews.

No internet or storage system is completely secure. We cannot guarantee that information will never be lost, accessed, altered, or disclosed without authorisation. You are responsible for protecting your credentials and promptly notifying us if you suspect account compromise.

18. International Data Transfers

SpinIt and its service providers may process or store information in countries other than your own. Those countries may have different data-protection laws. Where required, we use recognised safeguards such as contractual clauses, adequacy decisions, or other lawful transfer mechanisms.

19. Your Privacy Rights

Depending on where you live, you may have rights to:

• access personal information we hold about you;
• correct inaccurate or incomplete information;
• delete information;
• restrict or object to certain processing;
• withdraw consent;
• receive certain information in a portable format;
• opt out of targeted or personalised advertising or legally defined sale or sharing;
• appeal a decision about a privacy request; and
• complain to a data-protection authority.

Rights are subject to applicable law and exceptions. We may need to verify your identity and authority before acting on a request. We will not unlawfully discriminate against you for exercising a privacy right.

Residents of the European Economic Area, United Kingdom, or Switzerland may also have rights under applicable data-protection law and may complain to their local supervisory authority. Residents of certain United States states may have additional rights relating to access, correction, deletion, portability, targeted advertising, profiling, and sale or sharing as legally defined.

20. Children’s Privacy

SpinIt is a general-audience service and is not directed to children below the age at which they may independently consent to personal-data processing in their jurisdiction. Children should use SpinIt only with the involvement and permission of a parent, guardian, teacher, or authorised institution where required.

We do not knowingly collect personal information from children in violation of applicable law or knowingly use children’s personal information for personalised advertising. Adults and institutions should avoid placing unnecessary identifying information about children in wheels and should use non-identifying labels where practical.

Contact us if you believe a child has improperly provided personal information so that we can investigate and take appropriate action.

21. Third-Party Services and Links

SpinIt may contain ads, links, integrations, or login options provided by third parties. We do not control their privacy, security, content, or practices. This Policy does not apply to information collected directly by those third parties. Review their privacy policies and account settings before providing information or granting permissions.

22. Changes to This Policy

We may update this Policy to reflect changes to SpinIt’s features, providers, advertising or analytics practices, security controls, business model, or legal requirements. We will publish the revised version on this page and update the effective date. Where required, we will provide additional notice or obtain consent before materially changing how personal information is used.

23. Contact Us

Questions, privacy requests, or complaints may be sent to:

Service

SpinIt

Website

https://spinit.to

Email

privacy@spinit.to

Please provide enough information for us to understand and respond to your request. Do not send passwords, complete payment-card details, government identification numbers, or other highly sensitive information by ordinary email.