Privacy Policy

Last updated: May 2026

Summary

Questions? Reach out at contact@spinorflip.com.

What we collect

Spin content. Names you type into the wheel run entirely in your browser. We do not upload or store them on our servers.

Account information. If you create an account, we collect your email address. If you sign in with Google, we receive your name and profile picture from Google's sign-in flow. Billing is handled by Stripe — we do not store payment card details.

Uploaded images. If you upload a custom background image, that image is processed entirely in your browser and stored locally (in your browser's storage). It is never transmitted to or stored on our servers.

Usage and analytics data. We use Google Analytics 4 and PostHog to understand overall site usage. These services collect data about how you use the site — pages visited, time on site, general location (city/country level), device type, and similar metrics. This data is associated with a pseudonymous identifier and is never linked to the names you enter into the wheel.

AI feature data. If you use an AI-powered feature (currently in beta), your prompt text is transmitted to Anthropic's API to generate a response. We do not store your prompts on our servers. Prompt data is subject to Anthropic's Privacy Policy.

Advertising data. If ads are shown on the site, Google AdSense may collect device identifiers and behavioral signals to serve relevant ads. See the Advertising section below.

Accounts and subscriptions

Account data (email, subscription status, recent wheel history) is stored securely via Supabase. Passwords are hashed — we never store them in plaintext. You may delete your account at any time from Settings → Account, which permanently removes your data from our systems.

Paid subscriptions are processed by Stripe. Cancellation takes effect at the end of the billing period. We reserve the right to change pricing with reasonable advance notice.

User-uploaded background images

You may upload a custom background image for your wheel. This image is processed entirely in your browser — it is resized, checked against content guidelines, and stored in your browser's local storage. It is never transmitted to or stored on Spin or Flip's servers.

Because we never receive your uploaded image, we have no ability to access, share, or delete it. To remove an uploaded background, use the background customization options in the app or clear your browser's local storage.

Analytics (Google Analytics)

We use Google Analytics 4 to understand overall site usage. Google Analytics collects data such as pages visited, session duration, device type, and approximate location. This data is linked to a pseudonymous identifier (not your name or email) and is processed by Google.

Google may use this data in accordance with Google's Privacy Policy. You can opt out of Google Analytics tracking using the Google Analytics Opt-out Browser Add-on or your browser's cookie controls.

Analytics data never includes the names you enter into the wheel.

Product analytics (PostHog)

We use PostHog to understand how users interact with specific features — for example, which buttons are clicked and which steps in a flow are completed. PostHog collects event data (such as "spin triggered" or "wheel saved") associated with a pseudonymous identifier. This data is never linked to the names you enter into the wheel.

PostHog data is processed in the United States. You can opt out of PostHog tracking via your browser's cookie controls or by using a content blocker.

PostHog data never includes the names or options you enter into the wheel.

AI features (Beta)

Spin or Flip offers optional AI-powered features that generate wheel options from your text prompts. These features use the Anthropic Claude API. When you submit a prompt, that text is transmitted to Anthropic to generate a response.

We do not store your prompts on our servers. Anthropic may retain prompt data in accordance with their own privacy policy. See Anthropic's Privacy Policy for details.

Do not include sensitive personal information (passwords, financial details, health information) in AI prompts.

Advertising (Google AdSense)

Spin or Flip may display ads served by Google AdSense. Google and its partners may use cookies, device identifiers, and behavioral signals to serve ads that are relevant to you across websites and apps. This is sometimes called interest-based or personalized advertising.

For more on how Google uses data for advertising, see How Google uses data when you use our partners' sites.

You can manage or opt out of personalized advertising:

We do not provide your spin content or email address to advertisers.

Your privacy rights (GDPR & CCPA)

All users. You can control cookies and opt out of analytics and advertising as described in the sections above. Account holders can delete their data from Settings → Account.

California residents (CCPA). Under California law, sharing personal data with third parties for cross-context behavioral advertising is treated as a "sale or sharing" of personal information, even if no money changes hands. Our use of Google Analytics and Google AdSense falls within this definition. You have the right to opt out of this sharing. To do so, use the opt-out tools linked in the Analytics and Advertising sections above, or contact us at contact@spinorflip.com.

We do not sell your personal information for money, and we do not share your email address or spin content with advertisers.

EU/EEA residents (GDPR). Our lawful basis for analytics and advertising is legitimate interest (measuring site performance and funding the free service). You have the right to access, correct, or request deletion of your personal data, and the right to object to processing. Contact us at contact@spinorflip.com to exercise these rights. Note that Google Analytics data is processed by Google as a data controller under their own terms.

Children's privacy

Spin or Flip is a general-audience tool. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information through the service, contact us at support@spinorflip.com and we will take steps to delete it.

International data transfers

Spin or Flip is operated from the United States. If you access the service from outside the US, your data may be transferred to and processed in the US. Google Analytics and Google AdSense data is processed by Google globally. For EU users, Google relies on standard contractual clauses for cross-border data transfers.

Data security

We follow industry-standard practices to protect data stored on our servers, including encrypted connections (HTTPS) and access controls. No system is perfectly secure — if you find a security issue, please report it to support@spinorflip.com.

Changes to this policy

We may update this policy to reflect product changes or legal requirements. The "Last updated" date at the top shows the latest revision. Continued use after a material change constitutes acceptance.

Contact

Questions about this policy? Contact us at contact@spinorflip.com.