Last updated: 12 October 2026
The short version. Spindle works fully without signing in. If you do not sign in, your settings never leave your device. If you choose to sign in with Google, we store your email address, display name, and your Spindle settings so they can sync to your other devices. Every page view sends us three anonymous facts: which page, the site you came from, and your country. No cookies are used for counting, nothing is stored that can identify you, and no two visits can be linked together. There is no advertising, no profiling, and nothing is sold or shared with anyone.
Who runs this site
Spindle is operated by My Game My Life Productions. Questions about this policy or anything stored against your account can go to qaulity1441@gmail.com.
What is stored in your browser
Spindle saves your settings in your browser's local storage on the device you use it on. This happens whether or not you sign in. It covers:
- Where the wheel and challenge card are positioned on screen, per game.
- Your challenge sets, including which challenges you have excluded from a set.
- Custom challenges you have written for your own wheel.
- Which categories you have switched off, and your play-mode preference.
This data stays in your browser. It is not transmitted anywhere. You can erase it at any time by clearing site data for this site in your browser settings, which returns the site to its defaults. Clearing your browser data also removes any layout or challenge-set changes you have made, so export anything you want to keep first.
Signing in with Google
Sign-in is optional. It exists for one purpose: keeping your settings in step across more than one device. If you never sign in, the site behaves exactly the same way and no account exists.
When you sign in, this is what happens:
- Google's sign-in library opens. Google returns a signed identity token to your browser directly. Google decides what to share based on your own Google account settings.
- Your browser sends that token to our server, which verifies Google's signature on it, then discards it. The Google token itself is never stored.
- We keep your Google account ID, email address, and display name, and use them to recognise you when you return.
We request no access to your email, files, photos, contacts, calendar, or Drive. Spindle asks for identity only, enough to know who you are, and nothing else.
Page view counting
Every page you open sends a small request to our server so we can see which pages are being used and whether people are arriving from YouTube, Twitch or a search engine. It is deliberately as thin as we could make it:
- No cookie, and nothing written to your browser. No advertising identifier, no fingerprint, no user agent.
- No IP address is kept. Cloudflare works out your country for us and that is all we receive.
- Nothing links one visit to another, so we cannot tell whether you visited once or forty times, or build a profile of what you do.
- A view records the page you opened, the website that referred you, and your country. When the page is one game, the game id is recorded too. A finished spin on the wheel records that game id the same way. The challenge name is not recorded.
- Counts are kept for three months, then deleted automatically.
- Our own OBS browser sources, used to put the wheel on a stream, are excluded, so the numbers do not include ourselves.
This is not shared with anyone and is not used to target advertising, because there is no advertising. If you would rather not send it, blocking requests to our server, or using a content blocker, stops it and nothing on the site breaks.
What is stored on our server
If you sign in, we store the following against your account, and nothing more:
| Data | Why |
|---|---|
| Google account ID, email, display name | To recognise you on future visits and show who is signed in |
| Your Spindle settings | To load them on your other devices |
| A session cookie | To keep you signed in. Expires after 30 days |
Only the settings listed under What is stored in your browser are synced. Anything else on the device is never sent. Challenge data files are served as static files and are not linked to you.
If you submit a challenge or request a game, we store the text you typed and the optional name, until the request is dismissed. That queue is not public. If you publish a challenge to the gallery, the challenge text and the optional display name are public, and can be removed by you while you are signed in. Your email address is not part of either of those.
Who hosts the data
The site is hosted on GitHub Pages. Sign-in, settings sync and page view counting run on Cloudflare Workers, with settings held in Cloudflare's KV storage and view counts in Cloudflare's Analytics Engine, both chosen for their free tiers. Cloudflare processes this data purely on our instructions to operate the service. Google acts as the identity provider when you sign in. None of them may use your data for their own purposes, and none of them may sell it.
Cookies
Signing in sets one cookie, cw_session. It keeps you signed in. It is
HttpOnly so scripts cannot read it, Secure so it is only sent over HTTPS, and
SameSite=None, which is what allows it to work on this site at all: the pages are
served from GitHub Pages while sign-in runs on a separate server, so every request crosses a
site boundary and a stricter cookie would be discarded by your browser. It holds a signed
reference to your account and your settings are never placed in a cookie. If you sign out it is
deleted immediately.
There are no advertising cookies, no third-party trackers, and no cross-site tracking of any kind. The page-view counts above are the only measurement. They are not used to build a profile.
How long we keep it
Account data is kept until you sign out and ask us to delete it, or until you write to us. Deleting your account removes your stored settings and account record; nothing is retained.
Deleting your account
Email qaulity1441@gmail.com from the address you signed up with and ask for deletion. We will remove your account and settings. You do not have to give a reason and there is nothing to cancel first.
Children
Spindle is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has signed in, contact us and we will remove the account.
Your rights
You can see what we hold about you, correct it, or have it deleted, at any time and free of charge. Just email us. Where you signed in with Google you can also review and revoke access at your Google account connections.
Changes to this policy
If this policy changes we will update the date at the top of this page. Continuing to use Spindle after a change means the updated policy applies from that point on.