Privacy Policy

1. Introduction

SpinDeck ("we", "us", or "our") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and the choices you have. By using the Service you agree to the collection and use of information as described in this policy.

2. Information We Collect

2.1 Information you provide

• Account data – email address, display name, and password (hashed) when you register.
• Wheel content – segment labels, colors, weights, and wheel names you create and save.
• Communications – messages you send us via email or support channels.

2.2 Information collected automatically

• Usage data – pages visited, features used, spin counts, timestamps.
• Device & browser data – IP address, browser type and version, operating system, referring URL.
• Local storage – spin-limit counters and anonymous wheel data stored locally in your browser (never transmitted to our servers unless you sign in).

2.3 Information from third parties

If you sign in using a third-party OAuth provider (e.g., Google), we receive your name, email address, and profile picture as permitted by that provider's privacy settings.

3. How We Use Your Information

• To provide, operate, and maintain the Service;
• To manage your account and authenticate you;
• To store and sync your wheel designs across devices;
• To enforce spin limits and subscription entitlements;
• To send you transactional emails (password resets, subscription confirmations);
• To analyse usage patterns and improve the Service;
• To respond to your support requests;
• To comply with legal obligations.

We do not sell your personal data to third parties. We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

4. Legal Basis for Processing (EEA/UK)

If you are in the European Economic Area or United Kingdom, our legal bases for processing are:

• Contract – processing necessary to provide the Service you signed up for;
• Legitimate interests – analytics and security that do not override your rights;
• Consent – optional cookies and marketing communications (you may withdraw at any time);
• Legal obligation – compliance with applicable laws.

5. Data Sharing & Disclosure

We may share your information with:

• Infrastructure providers – Cloudflare (hosting, CDN, Workers) under data processing agreements;
• Payment processors – Polar or Stripe to process subscription payments; we do not store full card details;
• Analytics – anonymised, aggregated usage statistics only;
• Law enforcement – if required by valid legal process or to protect the rights and safety of our users.

6. Data Retention

We retain your account data for as long as your account is active. Wheel data associated with your account is retained until you delete it or close your account. Anonymous local-storage data exists only in your browser and is never transmitted to us. After account deletion, we may retain anonymised, aggregated data indefinitely.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you;
• Request correction of inaccurate data;
• Request deletion of your data ("right to be forgotten");
• Object to or restrict certain processing;
• Data portability (receive your data in a structured, machine-readable format);
• Withdraw consent at any time (without affecting the lawfulness of prior processing);
• Lodge a complaint with your local data protection authority.

To exercise these rights, email privacy@customfortunewheel.com. We will respond within 30 days.

8. Security

We implement industry-standard security measures including HTTPS encryption, hashed passwords, and access controls. No system is completely secure; we cannot guarantee absolute security but will promptly notify you of any breach that materially affects your data as required by applicable law.

9. Children's Privacy

The Service is not directed to children under 13 (or under 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. International Transfers

Your data may be processed and stored on servers located outside your country of residence. Where we transfer data from the EEA/UK to countries without an adequacy decision, we rely on Standard Contractual Clauses or other appropriate safeguards.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Service. Your continued use of the Service after the effective date of changes constitutes acceptance of the updated policy.

12. Contact Us

For privacy-related enquiries, contact us at privacy@customfortunewheel.com.