Privacy Policy

SpinKit ("we", "us") is a free randomiser studio for spin wheels, slot reels, Spin Sheets and team pickers, available at spinkit.org. This policy explains what we collect, why, and the choices you have. We keep it short and in plain language.

The short version

SpinKit is local-first. You can use every core feature without an account, and your wheels, slots, Spin Sheets, teams, results and settings are stored in your own browser. We only collect personal data when you choose to create an account or use online features.

Data stored on your device

By default your content lives in your browser's local storage and never leaves your device. Clearing your browser data removes it. This includes your wheels, slots, Spin Sheets, teams, spin history, and app preferences.

Data we process when you sign up

If you create an optional account, we store:

• Account details — your email address and a securely hashed password (we never see your plain password), plus a username, display name, and optional bio and profile photo.
• Cloud saves — any wheels, slots, Spin Sheets or team setups you choose to sync, including their version history.
• Social features — friend connections you create, and any presets you publish or share via short links or public views.

Live spin rooms are ephemeral: their chat and spin messages are relayed in real time and are not stored on our servers.

Service providers

We use a small number of trusted providers to run SpinKit:

• Supabase — authentication, database and file storage for accounts, cloud saves and real-time live rooms.
• Cloudflare — hosting, content delivery, security, and privacy-focused, aggregated traffic analytics (Browser Insights). We do not use advertising or cross-site tracking.

Cookies and local storage

We use your browser's local storage to save your content and to keep you signed in. We do not use third-party advertising or tracking cookies.

Your rights

You can view and edit your profile, remove individual cloud items, revoke share links, and sign out at any time. Depending on where you live (including under UK and EU GDPR) you may have rights to access, correct, export or delete your personal data, and to object to or restrict processing. To exercise these rights or to request account deletion, contact us at [email protected].

Data retention

We keep account data for as long as your account is active. When you delete your account or specific items, the associated data is removed from our active systems.

Children

SpinKit is not directed at children under 13, and we do not knowingly collect their personal data.

International transfers

Our providers may process data in regions outside your own. Where required, appropriate safeguards are in place to protect your information.

Changes

We may update this policy from time to time. Material changes will be reflected here with a new "last updated" date.

Contact

Questions about privacy? Email [email protected].