Legal & privacy
Privacy policy
Big Spinning Wheel lets people create and share wheels by public link or owner-enabled public embed. This privacy policy explains what information we collect, how we use and share it, how long we typically keep it, and what California privacy rights may apply.
1. Important: public means public
Assume shared-by-link content can be seen by other people
If you enable a public link for a wheel, public wheel surfaces may show the wheel, owner display, public-facing settings, and the current or latest spin result when one exists. If you also enable public embedding, those public wheel surfaces can appear on external websites, stream scenes, recordings, event pages, and other external pages. If you allow shared spins, people using the public link or embed may be able to spin the wheel and change landed segment availability when you enable that option. If you show the recent spin recap to visitors, recent spin history may also be visible.
Do not put sensitive information into wheel names, wheel segments, descriptions, or public profile names.
2. Information we collect
| Category | Examples | Sources |
|---|---|---|
| Account information | Email address, account ID, display name, profile settings, and account preferences | Directly from you when you register or update your account |
| Security information | Password-related data, passkey public-key credential data, MFA settings, recovery or verification events | Directly from you and from the devices or browsers you use to authenticate |
| User content and collaboration data | Wheel names, content you type, upload, or import into wheels, wheel settings, landed segment enabled/disabled state, collaborator settings and permissions, ownership-transfer request data, public link and embed settings, and spin results or history tied to the wheel | Directly from you and other authorized users of the wheel |
| Favorites and workspace data | Wheels you favorite and when you favorite them | Directly from you |
| Device and usage data | IP address, browser type, device identifiers, timestamps, page actions, and diagnostic logs | Automatically from your browser, device, and our service logs |
| Support communications | Messages you send when you ask for help or contact us about privacy, legal, or account issues | Directly from you |
3. How we use information
- Provide and operate the service, including creating, importing, exporting, displaying, favoriting, sharing, and spinning wheels.
- Support real-time updates, collaborator access, ownership-transfer workflows, public link access, and owner-enabled public embed access.
- Authenticate users, secure accounts, prevent abuse, investigate misuse, and protect the integrity of the service.
- Debug, maintain, monitor, and improve performance and reliability.
- Send account, verification, security, and support communications.
- Comply with law and enforce our Terms.
4. How we share information
- Public sharing you control: if you enable a public link, wheel content, owner display, public-facing settings, the current or latest spin result when one exists, and any recent spin recap you show to visitors may be visible on public wheel surfaces, including external websites and streaming tools when you enable public embedding.
- Collaborators you invite: collaborators can access the wheel according to the permissions you grant, and a collaborator who has already joined can become the new owner if they accept the transfer while signed in.
- Service providers: we may use vendors for hosting, storage, email delivery, and security operations that process information on our behalf.
- Legal, safety, and enforcement: we may disclose information where reasonably necessary to comply with law, respond to lawful requests, protect users, investigate abuse, or enforce our Terms.
- Business transfers: information may be transferred as part of a merger, acquisition, bankruptcy, reorganization, or similar transaction.
Unused invite codes do not show who will use them. After someone uses a code, they appear as a collaborator according to the permissions the owner granted.
5. Data retention
We keep information only as long as reasonably necessary for the purposes described in this policy. Retention is typically about 30 days for transient logs, diagnostics, temporary sharing metadata, pending ownership-transfer request data, and backups. Some information, including operational audit records, account-security events, wheel/share/transfer history, and legal or compliance records, may be kept longer when reasonably necessary for security, fraud prevention, legal compliance, dispute resolution, or backup recovery.
| Category | Typical retention |
|---|---|
| Account and profile data | While your account is active, and typically about 30 days after deletion for closure processing, unless a longer period is reasonably necessary or legally required. |
| Wheel content and configuration | Until the current owner deletes the wheel or closes the owning account, unless longer retention is reasonably necessary for abuse prevention, safety, legal compliance, dispute resolution, or backup recovery. Ownership transfer keeps the same wheel record, and the current owner controls deletion of that wheel record. Former owners and collaborators may submit privacy requests, but deletion or correction may be limited when the same wheel content is controlled by another user or retained for permitted safety, legal, abuse-prevention, dispute, or backup reasons. |
| Favorites | Until you unfavorite the wheel, your account is deleted or closed through the account/privacy request process, or the referenced wheel is deleted or archived. Public-only favorites can appear in your workspace while the public link remains active. Disabling or revoking the public link removes public-only favorites. Owner and collaborator favorites remain governed by authenticated access. |
| Recent spin history and invite records | Typically about 30 days, but may be longer where reasonably necessary for service integrity, abuse prevention, or legal compliance. |
| Security logs, authentication events, and operational audit records | Typically about 30 days for transient security logs, but operational audit records and account-security events may be kept longer when reasonably necessary to investigate abuse, protect accounts, resolve disputes, or comply with law. |
| System logs, diagnostics, and backups | Typically about 30 days, but may be longer where reasonably necessary for backup recovery, reliability review, or compliance. |
Even after deletion, residual copies may remain for a limited time in backups or logs.
6. Your choices and controls
- You can control whether a wheel has a public link.
- You can control whether an active public wheel allows embedding on external websites and streaming tools.
- You can choose whether a public page allows shared spins, practice spins only, or a view-only experience.
- You can choose whether visitors can see the recent spin recap on public wheel surfaces. This does not hide current or latest spin result state from public wheel surfaces when a result exists.
- You can choose whether eligible spinners can disable the segment that landed, and whether public links or collaborators are blocked from that action.
- You can choose collaborator edit and spin permissions, and you can transfer wheel ownership only to a collaborator who has already joined and accepts while signed in.
- You can favorite or unfavorite owned, collaborated, and public wheels as private account preferences. Your wheels workspace can show favorites when you currently have owner or collaborator access, or when a public-only favorite still has an active public link.
- You can manage collaborators and revoke collaborator access.
- You can export a selected wheel definition from the wheel editor. That download is not a full account/privacy data export; use the privacy request email and subject line for access, deletion, correction, or broader data requests.
- After download, export files are under your control.
- You can update your profile information and manage passkeys, MFA, and recovery options.
7. California privacy rights
If you are a California resident, you may have the right to request access to personal information, request deletion, request correction of inaccurate personal information, and opt out of the sale or sharing of personal information. We do not sell personal information and we do not share personal information for cross-context behavioral advertising.
- Request method: email legal@bigspinningwheel.com with the subject line "California Privacy Request".
- Verification: we may need to verify your identity before fulfilling a request.
- Authorized agents: we may require proof of authorization and may still verify your identity directly where permitted by law.
- Non-discrimination: we will not discriminate against you for exercising applicable privacy rights.
We use sensitive personal information only as reasonably necessary to provide the service, secure accounts, and prevent fraud.
8. Cookies, Do Not Track, and opt-out preference signals
- We use cookies and similar technologies needed to run, secure, monitor, and troubleshoot the service, including keeping users signed in.
- We may use service providers that help us host, secure, and measure the performance and reliability of the service. Those providers may process limited technical and usage information on our behalf, such as IP address, browser and device information, timestamps, pages viewed, interactions with the service, referrer data, session or diagnostic identifiers, and error or performance reports.
- We do not respond to browser Do Not Track signals as a standalone standard.
- Other parties do not collect personal information about your online activities over time and across different websites when you use the service, except that our service providers may process limited technical and usage data on our behalf solely to operate, secure, monitor, and improve the service and not for their own cross-context behavioral advertising purposes.
- We do not sell personal information and we do not share personal information for cross-context behavioral advertising. If that ever changes, we will update this policy and honor valid opt-out preference signals as required by law.
9. Children
The service is not intended for children under 13. If you believe a child under 13 has provided personal information, contact legal@bigspinningwheel.com.
10. Shine the Light
We do not disclose customers' personal information to third parties for their direct marketing purposes.
11. Changes to this policy
We may update this privacy policy from time to time. The date above shows when it last took effect. If we make material changes, we will provide additional notice where required by law.
Related pages
Read the short California summary or return to the legal center for the full legal surface.