Política de privacidad

Effective date: July 6, 2026.

0. The short version

• Your entries never leave your browser. The names, options, or prizes you type into FateFlap are saved only in your own browser's `localStorage`, on your own device. We never see, receive, upload, or store them — not even briefly, not even in aggregate.
• No account, no upload, no server-saved wheel. There's nothing to sign up for. Everything — adding entries, spinning, results, history — runs entirely in your browser.
• Our analytics are cookieless and content-blind. We run a self-hosted analytics tool (Plausible) to see aggregate traffic and coarse usage patterns (like "a spin happened in Classic mode with 6-10 entries") — never the text of any entry, never a winner's name, never anything that could identify you. It sets no cookie and needs no consent banner.
• We show one small third-party ad, identified as advertising. An ad unit from A-Ads (a-ads.com), rendered inside its own isolated frame as a distinct third-party unit separate from the game content, may appear on the site. It never sees, and is never shown, anything you type into the wheel — your entries stay exactly as private as described above. See §5 for what the ad partner does and how to opt out.
• Questions or requests? Email contact@zixdev.com any time — see §12.

1. Who we are

FateFlap (fateflap.com) is operated by:

ZIX DEV Inc, a Delaware corporation

1111B S Governors Ave STE 40023, Dover, DE 19904, United States

Data controller for your personal data in connection with this website

Contact: contact@zixdev.com

If you're in the European Economic Area or the United Kingdom, ZIX DEV Inc is the controller responsible for your personal data as described here.

2. Your wheel entries — private by design

Your entries never leave your device. Typing names or options, spinning the wheel, seeing a result, and reviewing your spin history all happen entirely inside your browser. Entries and your game settings (mode, weighted/wildcards toggles, sound) are written only to your own browser's `localStorage` (key `fateflap:v1`), and your theme preference to a second key (`fateflap-theme`). Nothing is uploaded, transmitted, copied, or retained on our side.

This is built into the code, not just promised:

• A strict Content-Security-Policy limits which servers the app is allowed to talk to at all (the current list is enforced by your browser and re-verified on every release). Even among those allowed destinations, your entries never travel to any of them — our analytics and advertising code paths are built so an entry's text has no way to flow into any outgoing request; this is enforced by the code's own types, not just by policy or promise.
• No account, sign-up, or login exists anywhere in the product.
• Close the tab, refresh, or clear your browser's site data, and whatever you typed is gone — released from memory or removed from local storage.
• This is verified automatically before every release with our own zero-network-egress and offline-mode tests, and is designed to survive independent security review. Since this version added one small third-party ad unit (§5), the broader claim that *nothing at all* leaves your browser has narrowed to a specific, behaviorally-tested guarantee that your entries, spin history, and settings never do — see §5 for exactly what our ad partner can and can't see.

Spin history and elimination order are session-only. Unlike your entries and settings, your Classic-mode history list and Elimination-mode eliminated list are not saved to `localStorage` at all — they live only in memory for as long as the tab stays open, and are gone on refresh.

3. What we collect — and what we don't

4. Analytics in detail

We run Plausible Analytics — a self-hosted, cookieless analytics tool — to see aggregate traffic and coarse product usage:

• What it sends: the page path you visited, the referring site (if any), your approximate country/region (derived at our server from your IP address, which is never stored), and a small set of coarse, closed-enum events: `wheel_spun` (with only a mode/entry-count-bucket/weighted/wildcards flag), `result_shown` (only the result *kind* — winner/eliminated/survivor/wildcard), `preset_used` (only which preset), `bulk_applied`, `mode_switched`, and `present_mode_on`.
• What it never sends, on any code path: the text of any entry, a winner's or eliminated entry's name, your spin history, or anything derived from them. This is enforced in code, not just policy — our analytics wrapper's type signature has no free-text parameter an entry's label could ever flow through.
• No cookies, no persistent identifier. To count same-day unique visitors without cookies, Plausible computes a one-way, scrambled combination of your IP address, browser, our domain, and a secret that's discarded and re-created every 24 hours.
• Self-hosted — not a third party. This runs on ZIX DEV Inc's own server (`plausible.zixdev.com`), not an outside analytics company.
• Why no consent toggle is needed. Plausible stores or accesses nothing on your device — no cookie, no local storage, no fingerprinting script — so it doesn't trigger the cookie-consent rule in the first place. It runs for every visitor, with no "Accept"/"Reject" choice to make.

5. Advertising

FateFlap shows a small ad unit from A-Ads (a-ads.com), a third-party advertising network, on some pages of the site, rendered inside its own isolated, cross-origin frame — no script from A-Ads runs directly in our page at all. A-Ads may set cookies or similar identifiers on your device. Where the law requires it, we ask your permission first, as described below; elsewhere, we rely on notice plus your opt-out/Global Privacy Control choice. This is separate from, and works differently than, the cookieless Plausible analytics described in §4.

• What A-Ads does. When the ad unit loads, A-Ads (and its own advertising partners) may set cookies or similar identifiers and process technical and behavioral information — such as your approximate location, device/browser information, the page you're on, and ad-interaction signals — to select and measure the ad shown to you, and, unless you've opted out, to personalize it.
• Your wheel entries are never involved. The ad unit is a separate, isolated cross-origin frame with no access to, and no code path into, the wheel engine, your entries, your spin history, or your local storage (§2/§3). This guarantee is unchanged and continues to be enforced by our Content-Security-Policy and tested automatically before every release.
• Consent, before anything happens (EEA, UK, Switzerland). If you're in the European Economic Area, the United Kingdom, or Switzerland, the A-Ads frame does not render at all until you say yes through our cookie preference center ("Manage" in the banner, or "Cookie preferences" in the footer) — consistent with the GDPR and the ePrivacy Directive.
• On by default elsewhere, with an easy opt-out. Outside the EEA/UK/Switzerland, the ad may load by default, the way most ad-supported free sites work. You can opt out any time — through "Cookie preferences" in the footer, or automatically, with no click needed, if your browser sends the Global Privacy Control (GPC) signal.
• California and other U.S. states. Because A-Ads may use information from your visit for cross-context behavioral advertising, this counts as a "share" (and plausibly a "sale") of personal information under the CCPA/CPRA. We honor Global Privacy Control automatically, and you can also opt out any time via "Do Not Sell or Share My Personal Information" in the footer or by emailing contact@zixdev.com (§12).
• What A-Ads does with this data is described in its own privacy policy — we don't control, and aren't responsible for, A-Ads' processing once data reaches it: A-Ads' Privacy Policy.
• Labeling. The ad unit is a distinct third-party unit, rendered inside its own separate frame and shown as a standard ad creative — never blended into, or styled to resemble, the wheel's own content, a wheel result, or an editorial recommendation. It is also programmatically identified as advertising for assistive technology (screen readers).

6. Cookies & your choices

Plausible (our analytics) still sets no cookie and needs no consent — see §4. Our advertising partner, A-Ads, may set cookies or similar identifiers when its ad unit loads (§5). Because of that:

• If you're in the EEA, UK, or Switzerland: you'll see a cookie banner on your first visit. Nothing from A-Ads loads, and no cookie is set, until you choose "Accept" (or make a choice in "Manage"). Change your mind any time via "Cookie preferences" in the footer.
• Everywhere else: the ad may load by default (the ad-supported-free-site model most sites use), and you can opt out any time via "Cookie preferences" in the footer, or automatically if your browser sends a Global Privacy Control (GPC) signal — no click needed.
• Local storage is separate and unaffected. Your entries, settings, and theme preference (§2) are a core product feature, not a tracking mechanism, and are not covered by this banner or by any "reject" choice — rejecting Advertising never deletes or blocks your saved entries.

7. Why we use this data — legal bases

If you're in California (or a similar U.S. state): our analytics (Plausible) is still self-hosted and shared with no one — using it does not count as a "sale" or "share." Our advertising partner (A-Ads, §5) is different: because it may be used for cross-context behavioral advertising, showing you an ad does count as a "share" (and plausibly a "sale") of personal information under the CCPA/CPRA, for that category only. We honor Global Privacy Control automatically, and you can opt out any time via "Do Not Sell or Share My Personal Information" in the footer.

8. Data retention

9. Sharing, subprocessors & international transfers

• We don't sell your entries, spin history, or other product data — full stop. Our advertising partner is different: because A-Ads may use technical/advertising signals for cross-context behavioral advertising (§5), that use does count as a "share" (and plausibly a "sale") of personal information under the CCPA/CPRA, for that category only, as described in §7. You can opt out of it any time (§10).
• Plausible Analytics (self-hosted) — not a third party. Plausible runs on ZIX DEV Inc's own server (`plausible.zixdev.com`).
• A-Ads (advertising) — an independent third-party ad network, not a ZIX DEV Inc subprocessor. When its ad unit loads, A-Ads acts as an independent controller for the data it collects for ad delivery and measurement (§5). It never receives your wheel entries, spin history, or any local storage data — only the technical and ad-interaction data described there.
• Cloudflare (hosting). Our website runs on Cloudflare's global network — the only third party that sees the technical logs in §3 in the normal course of serving the site. Your entries never reach Cloudflare either, since they never leave your browser.

10. Your privacy rights

Depending on where you live, you may have the right to know/access, correct, delete, restrict/object to processing, and port your personal data. There is very little of the above to "hold" on our side — we have no server-side copy of your entries or spin history. Email contact@zixdev.com to exercise any of these rights; we respond within 30 days (GDPR) or 45 days (CCPA/CPRA), whichever applies. California residents: we honor your browser's Global Privacy Control (GPC) signal — it automatically opts you out of the Advertising category (§5), which is the only data use on this site that currently qualifies as a "sale" or "share."

11. Children's privacy

FateFlap isn't directed at children, and it's built for use by adults and teens (Hosts) — including teachers and event organizers who may type the names of children they work with (for example, students in a classroom) as wheel entries. Whoever is named in an entry, that entry is never collected by us: it's saved only in the Host's own browser and is never transmitted to ZIX DEV Inc or anyone else (see §2). Because we never receive or retain any entry — a child's name or anyone else's — in any form, we don't knowingly collect personal information from children under 13 (or the relevant age where you live) through this product, regardless of who types what into it. If you believe a child has provided us with personal information some other way (for example, by emailing us directly), contact contact@zixdev.com and we will delete it. Our advertising partner is not configured to treat this site as directed to children, and the product remains general-audience, as described above.

12. Changes to this policy & contact

We'll update this policy as our practices change and post the revised version here with a new effective date. Questions or requests: contact@zixdev.com, or by mail at ZIX DEV Inc, 1111B S Governors Ave STE 40023, Dover, DE 19904, United States.