Privacy Policy

1. Introduction

This Privacy Policy explains how WheelOurNames ("we", "us", or "our") collects, uses, and protects information when you visit and use our website and interactive tools (the "Service"). By using the Service, you acknowledge the practices described below.

2. Information We Collect

No account required for the wheel. You can create, customize, and spin wheels without signing in. Wheel entries, settings, and winner history are stored in your own browser and are not transmitted to us.

Optional account. Signing in is optional and only adds cloud saving. If you choose to create an account, our authentication provider processes your email address (or, if you sign in with Google, the basic profile information Google returns) and stores an account identifier and session token. Wheels you explicitly save to the cloud — their name, entries, colors, and settings — are stored under your account until you delete them.

Automatic server log data. Like most websites, our servers automatically record standard technical information when you visit, including:

• IP address and approximate geographic region
• Browser type and version
• Operating system and device class
• Referring URL, pages requested, and timestamps

This log data is used for server metrics, security, abuse prevention, and aggregate performance analysis.

3. Cookies & Tracking Technologies

Browser storage (not cookies). WheelOurNames uses your browser's localStorage to keep your wheel entries, winner history, colors, audio and motion settings, theme, language, and your analytics-consent choice. These values stay on your device and are not sent to us. Clearing your browser's site data removes them.

Authentication tokens. If — and only if — you sign in, your session token is stored in browser storage so you stay signed in. Signing out removes it.

Current advertising status. WheelOurNames does not currently serve Google AdSense or any other advertising, and does not use advertising cookies. We do not use Google Tag Manager. If that ever changes, this policy will be updated before such services go live.

Google Analytics 4 (only with your consent). We use Google Analytics 4, provided by Google, to understand how the site is used and to improve the Service. Analytics is off by default: no Google Analytics script is loaded and no analytics data is sent until you choose "Accept analytics" in our notice. If you choose "Reject non-essential", Google Analytics is never loaded, and the site keeps working exactly the same. Analytics consent is optional and is not required to use the Service. Your choice is stored in your browser and you can change it at any time with the Cookie settings link in the footer.

Withdrawing analytics consent. If you previously accepted analytics and later choose "Reject non-essential" in Cookie settings, the withdrawal applies immediately, without reloading the page: your stored preference is set to rejected, Google is told that analytics storage is denied again, and we stop sending page views and events. On later visits the rejected choice is remembered and Google Analytics is not loaded at all. Withdrawal applies going forward; it does not delete analytics data that was already collected while consent was active.

When analytics is enabled, Google may process information such as the pages you view, approximate device and browser information, interaction and usage information (for example that a wheel was spun or an embed code was copied), and approximate geographic information derived by Google from your IP address. Google Analytics may set its own cookies or browser storage for this purpose.

Our advertising-related consent remains denied when analytics is accepted. We do not currently run advertising or request separate advertising consent. Accepting analytics only permits the analytics processing described above.

What we never send to analytics. We do not send wheel entries or names, winner names, Draw Record contents, email addresses, account or subscription identifiers, uploaded logo filenames, or any free-form text you type. Page addresses are reduced to the page path before they are reported, so shared or embedded wheel configurations (the ?w= or #w= data) are never transmitted to Google.

Not a certified consent platform. Our current notice governs analytics only. It is not a Google-certified consent management platform; should advertising be introduced, the consent layer will be replaced or extended accordingly and this policy updated.

Google Search Console. The site is registered with Google Search Console so we can see how our pages are indexed in Google Search. Search Console reports aggregate search data to us; it is not advertising, analytics installed on the page, or a tracking pixel, and it places no script or cookie in your browser.

Embedded wheels. Our embeddable wheel (/embed) does not set or require application cookies, localStorage or sessionStorage, contains no advertising, no analytics, no account or sign-in requirement, and makes no calls to our database. Embed codes generated today place the wheel's configuration in the URL fragment (the part after #), which browsers do not include in HTTP requests — so those entries are not transmitted to, or logged by, us. Older embed codes using a ?w= query link remain supported; their configuration is part of the request and may appear in request, CDN or server logs on the initial load.

Embed encoding is not encryption. The configuration is base64url-encoded, not protected. Anyone who can inspect the embedding page or the iframe URL can read and decode its contents. Do not publish private student, employee, customer or entrant information inside publicly published embed code.

How to control storage. You can clear or block site data and cookies in your browser settings (Chrome, Safari, Firefox, and Edge all offer these controls). Clearing site data resets your wheels and signs you out.

4. How We Use Information

• Operate, maintain, and improve the Service
• Monitor performance and diagnose technical issues
• Prevent fraud, abuse, and security incidents
• Authenticate you and store the wheels you choose to save to the cloud
• Comply with legal obligations

5. Data Sharing & Third Parties

We do not sell or share personal information for advertising purposes. We rely on the following service providers strictly to operate the Service:

• Our backend provider (optional account authentication and cloud-saved wheels)
• Google Sign-In (only if you choose to sign in with Google)
• Google Fonts (web font delivery)
• Google Analytics 4 (site usage analytics only after you grant analytics consent)
• Our hosting provider (page delivery and logging)
• Paddle (payment processing and subscription billing — only if you purchase or manage WheelOurNames Pro)

If you never sign in, never purchase Pro, and do not grant analytics consent, the only third parties involved in normal site use are our hosting provider and the font delivery service.

Payments and subscriptions (Paddle). WheelOurNames Pro is sold and processed through Paddle, which acts as the Merchant of Record for the sale. When you buy or manage a Pro subscription:

• Payment and billing are handled entirely by Paddle on Paddle's own systems, including the checkout and the hosted billing portal used for cancellation.
• WheelOurNames never receives or stores complete card or bank details. Card data is entered into Paddle's checkout, not ours.
• Paddle receives the billing and customer information it needs to process the transaction and meet its tax and compliance obligations — typically your email address, billing country and postcode, payment details and transaction data.
• We pass Paddle your account identifier at checkout so the resulting subscription can be linked to your WheelOurNames account.
• We receive back and store only the limited subscription information needed to grant Pro access: the Paddle customer ID, the subscription ID, the price or plan identifier, the billing status, the billing interval, billing period dates, any scheduled cancellation, and timestamps.

Paddle acts as an independent controller of the personal data it processes for the transaction and applies its own privacy policy and practices, which you should review at paddle.com/legal/privacy. Refund and cancellation handling is described in our Refund Policy.

6. Data Retention

Locally stored data (entries, settings) persists in your browser until you clear it. Server access logs are retained on a rolling basis for security and operational purposes, typically no longer than is necessary for those purposes. Cloud-saved wheels and account records are retained until you delete them or ask us to delete your account.

7. Your Rights — GDPR (EEA & UK)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) grants you the following rights:

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict or object to processing
• Right to data portability
• Right to withdraw consent at any time
• Right to lodge a complaint with your local supervisory authority

Our legal bases for processing are legitimate interest (server and security logs, abuse prevention) and, where you create an account or save a wheel to the cloud, performance of the service you requested. Consent is the basis for Google Analytics processing, and you may withdraw that consent at any time through Cookie settings.

8. Your Rights — CCPA / CPRA (California)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the CPRA, grants you the following rights:

• Right to know what categories of personal information are collected and how they are used
• Right to delete personal information we hold about you
• Right to correct inaccurate personal information
• Right to non-discrimination for exercising these rights
• Right to designate an authorized agent

We do not sell personal information and we do not share it for cross-context behavioral advertising, so there is nothing to opt out of. To exercise any of the rights above, email us using the contact details below.

9. Children's Privacy

The Service is not directed at children under 13 (or under 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

10. International Data Transfers

Our servers and service providers may process data in the United States and other jurisdictions. Where required, we rely on Standard Contractual Clauses (SCCs) or equivalent safeguards approved by data-protection authorities.

11. Security

We implement reasonable technical and organizational measures to protect data against unauthorized access, alteration, or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

12. Third-Party Links

Our website may contain links to external tools, resources, and websites that we do not operate. We are not responsible for the content, privacy practices, or data collection methods of any third-party site. We encourage you to review the privacy policies of any external service you visit.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The revised version will be posted on this page with a new "Last updated" date. Material changes will be highlighted on the home page where appropriate.

14. Contact

For privacy-related questions, requests, or complaints, contact us at:

contact@wheelournames.com

Phone: +389 76 381 235