Privacy
Policy candidate 2026-10-11-draft1. Prepared 2026-10-11 for review before paid launch; not a notice that new terms have taken effect.
SpinMatter is operated by Seymour Industrial (Shanghai) Co., Ltd. / 熙摩实业（上海）有限公司.
Free tools and local storage
Wheel entries, uploaded images and local history are stored in your browser. Clearing browser data can remove them. Motion inputs are used on your device for the current interaction; we do not store sensor recordings.
Sharing and cloud features
Sharing a wheel encodes its entries into the link. Anyone with the link can read the list; it is not encrypted. Cloud saving sends the project, images and brand settings you choose to our service. Cloud projects belong to your account. Hosted activity registration and display links are unlisted, not private: anyone with a link can access that public view. Approved display names and results can appear on the activity screen.
Accounts and payments
We store your email address and send one-time sign-in codes through our email delivery provider, Resend. Codes expire after 10 minutes and account sessions after 30 days. We use an essential, secure session cookie for account features. Paddle processes subscription payments; SpinMatter stores customer and subscription references and subscription status, not your card details.
Hosting, support and administration
Cloudflare hosts the online service and its database. Email support uses the shared company mailbox operated through Zoho. Requests submitted through the signed-in support form are stored in our database with encrypted message bodies; identify your product as SpinMatter and omit private lists. Product administrators can access the records necessary to resolve a request or abuse report. Internal company reporting contains approved aggregate counts and safe service alerts, not your email, lists, images or individual orders.
Fonts are served from SpinMatter's own origin; pages do not request them from Google Fonts. See our provider inventory and security guidance. We do not claim a signed data processing agreement or a compliance certification that has not been established.
Usage measurement
We count selected product actions by day and surface. These events exclude names, lists, emails, images, seeds and shared-link contents. Browser Do Not Track and Global Privacy Control disable these events. Temporary request limits use hashed network identifiers to limit abuse; hosting and service providers may process request metadata for security and delivery.
Children and hosted rosters
Accounts and hosting are intended for adults. For classroom or family activities, an adult should manage the list and use nicknames or non-identifying labels with appropriate permission. Do not enter sensitive personal information. Contact support if a child's information has been submitted inappropriately; provide a safe description first, not a public link containing the information.
Access and deletion
Signed-in users can export account data from Account or Workspace. You can delete cloud projects and activities, or delete an account with no billing history after ending an active subscription. For accounts with payment or order records, use Support for a verified deletion request and retention review. Account deletion removes associated projects, activity registrations and results from our application database. Payment records retained by Paddle follow its own policies and applicable obligations.
Local data remains until you remove it or clear browser storage. Saved projects and activities remain until you delete them or your account. Temporary authentication and rate-limit records are expired and cleaned in bounded batches. Operational message records and audit records follow the published retention settings at launch; the final billing/support retention schedule and any regional transfer or rights procedures require policy approval before paid service begins.
For access, correction, deletion, objection or a privacy concern, contact support. We verify the request belongs to you before disclosing account data. Where additional rights or deadlines apply, they are not displaced by this candidate.