Privacy Policy

The short version

There is no account or database. Your lists live in your own browser. We use a self-hosted Umami service for limited, cookieless usage analytics; share-link contents reach the Worker when opened, and contact-form contents reach us when you send them.

What we do not collect

• No account. There is nothing to register for, so there is no name, email or password on file.
• Limited analytics only. Self-hosted Umami receives the page path without its query string, referring page, page title, browser, operating system, device type, screen size, language and country. It receives no wheel or list contents, and we send no custom product events. There are no heatmaps, session recordings or advertising trackers.
• No advertising. No ad network, no ad cookies, no ad-shaped space on the page waiting for one.
• No advertising profile. Analytics is not connected to an account or used for advertising.

What stays in your browser

Your entries, saved wheels, spin history, weight presets, attached pictures and sounds, and your spin settings are stored in your browser's local storage. They are not uploaded, and they are not backed up anywhere. If you clear your site data they are gone, which is why the backup panel exists: it writes them to a file you keep.

The Cookie Policy lists exactly which keys hold what.

The one place your list reaches a server

When you copy a share link, the wheel is encoded into the link itself rather than saved on a server. That is what makes a link never expire and stay a snapshot of the moment you copied it.

The trade-off is worth stating plainly: because the wheel is in the URL's query string, it is sent to our server as part of the request when somebody opens the link. It has to be — the wheel is rendered on the server so the recipient sees a real wheel on the first frame instead of an empty circle.

We do not log or persist request parameters, so the link's contents are used to render the page and then discarded. Still: a share link contains your list, so treat it the way you would treat the list itself.

The contact form

If you write to us, we receive the name, email address and message you typed, delivered to us as email. We use it to answer you. It is not added to a mailing list — there isn't one.

Who else is involved

The site runs on Cloudflare Workers, so Cloudflare handles the network request and applies its own infrastructure logging and abuse protection as our hosting provider. Contact-form messages are delivered as email through Cloudflare Email. Limited usage analytics is processed by our self-hosted Umami service.

Children

TossWheel is a spinning wheel with no account, no messaging and no user-generated content shared between people. It collects nothing that could identify a child, which is also true of any other visitor.

Your rights

Because there is no account and nothing stored server-side, there is no record of you to access, correct, export or delete. What is stored is on your own device and under your control: clearing site data removes it, and the backup panel exports it. For anything you sent through the contact form, ask us and we will delete the message.

Changes

If this policy changes, the new version replaces this page and the date at the top changes with it.

Questions

If something here is unclear or looks wrong, please contact us.