Politique de confidentialité
Ce que FateFlap collecte, ce qu'il ne collecte jamais, et comment vos entrées restent sur votre appareil.
Cette page n'est disponible qu'en anglais pour le moment. Nous travaillons sur les traductions.
Effective date: July 6, 2026.
0. The short version
- Your entries never leave your browser. The names, options, or prizes you type into FateFlap are saved only in your own browser's `localStorage`, on your own device. We never see, receive, upload, or store them — not even briefly, not even in aggregate.
- No account, no upload, no server-saved wheel. There's nothing to sign up for. Everything — adding entries, spinning, results, history — runs entirely in your browser.
- Our analytics are cookieless and content-blind. We run a self-hosted analytics tool (Plausible) to see aggregate traffic and coarse usage patterns (like "a spin happened in Classic mode with 6-10 entries") — never the text of any entry, never a winner's name, never anything that could identify you. It sets no cookie and needs no consent banner.
- No advertising, no monetization at all in this version. Nothing to opt out of.
- Questions or requests? Email contact@zixdev.com any time — see §11.
1. Who we are
FateFlap (fateflap.com) is operated by:
ZIX DEV Inc, a Delaware corporation
1111B S Governors Ave STE 40023, Dover, DE 19904, United States
Data controller for your personal data in connection with this website
Contact: contact@zixdev.com
If you're in the European Economic Area or the United Kingdom, ZIX DEV Inc is the controller responsible for your personal data as described here.
2. Your wheel entries — private by design
Your entries never leave your device. Typing names or options, spinning the wheel, seeing a result, and reviewing your spin history all happen entirely inside your browser. Entries and your game settings (mode, weighted/wildcards toggles, sound) are written only to your own browser's `localStorage` (key `fateflap:v1`), and your theme preference to a second key (`fateflap-theme`). Nothing is uploaded, transmitted, copied, or retained on our side.
This is built into the code, not just promised:
- A strict Content-Security-Policy (`connect-src 'self' https://plausible.zixdev.com`) makes it technically impossible for the app to send a network request carrying an entry's text anywhere else.
- No account, sign-up, or login exists anywhere in the product.
- Close the tab, refresh, or clear your browser's site data, and whatever you typed is gone — released from memory or removed from local storage.
- This is designed to survive independent security review, and is verified automatically before every release with our own zero-network-egress and offline-mode tests.
Spin history and elimination order are session-only. Unlike your entries and settings, your Classic-mode history list and Elimination-mode eliminated list are not saved to `localStorage` at all — they live only in memory for as long as the tab stays open, and are gone on refresh.
3. What we collect — and what we don't
| Category | Do we collect it? | Details |
|---|---|---|
| Wheel entries (names, options, prizes) | No. | Stored only in your own browser's `localStorage`. Never uploaded or transmitted. |
| Spin history / elimination order | No — not even locally, long-term. | Session-only, in memory; gone on refresh. |
| Accounts, names, emails, passwords | No. | There are no accounts, sign-ups, or logins. |
| Usage analytics (Plausible, self-hosted) | Yes — aggregate only; no consent needed (cookieless). | Aggregate traffic + coarse, content-blind gameplay signals (e.g. mode switched, a preset was used, an entry-count bucket) — never any entry's text or a winner's name. See §4. |
| Advertising | No — not included in this version. | No ad code or ad-network integration ships in v1. |
| Server / network logs | Yes — standard for any website. | Our host, Cloudflare, automatically logs technical request data for every visit — at minimum your IP address and browser type. |
| Cookies | No. | Plausible sets no cookie; there is no advertising to set one either. |
| Local storage (functional) | Yes. | Remembers your theme (light/dark), your entries, and your game settings. Stays on your device; never sent to us. |
| Third-party trackers | None. | Our analytics (Plausible) is self-hosted on our own infrastructure, not a third-party tracker. |
| Children's data | No. | We don't target children or ask for sensitive data. |
| Payment data | Not applicable. | FateFlap is free; there is no payment or checkout anywhere in the app. |
4. Analytics in detail
We run Plausible Analytics — a self-hosted, cookieless analytics tool — to see aggregate traffic and coarse product usage:
- What it sends: the page path you visited, the referring site (if any), your approximate country/region (derived at our server from your IP address, which is never stored), and a small set of coarse, closed-enum events: `wheel_spun` (with only a mode/entry-count-bucket/weighted/wildcards flag), `result_shown` (only the result *kind* — winner/eliminated/survivor/wildcard), `preset_used` (only which preset), `bulk_applied`, `mode_switched`, and `present_mode_on`.
- What it never sends, on any code path: the text of any entry, a winner's or eliminated entry's name, your spin history, or anything derived from them. This is enforced in code, not just policy — our analytics wrapper's type signature has no free-text parameter an entry's label could ever flow through.
- No cookies, no persistent identifier. To count same-day unique visitors without cookies, Plausible computes a one-way, scrambled combination of your IP address, browser, our domain, and a secret that's discarded and re-created every 24 hours.
- Self-hosted — not a third party. This runs on ZIX DEV Inc's own server (`plausible.zixdev.com`), not an outside analytics company.
- Why no consent toggle is needed. Plausible stores or accesses nothing on your device — no cookie, no local storage, no fingerprinting script — so it doesn't trigger the cookie-consent rule in the first place. It runs for every visitor, with no "Accept"/"Reject" choice to make.
5. Cookies & your choices
We don't use cookies, and we don't need a cookie-consent banner. Nothing on this site requires your permission to run: the game's local storage is a core product feature (not a tracking mechanism), and our analytics tool is cookieless by design. If that ever changes — for example if we add advertising in a future version — we'll build the appropriate consent mechanism first and update this policy before it goes live, not after.
6. Why we use this data — legal bases
| What we use it for | What data | Legal basis (GDPR Art. 6) |
|---|---|---|
| Run the game itself | None — nothing personal reaches us to process | Not applicable |
| Remember your entries, settings, and theme in this browser | Local storage only, never sent to us | Not applicable — exempt from cookie-consent rules as storage "strictly necessary" for the feature you asked for |
| Keep the service secure and reliable | IP address / browser type in access logs | Legitimate interests — protecting the service and its users from abuse and outages |
| Measure aggregate traffic and coarse gameplay patterns (Plausible, self-hosted) | Page path, referrer, coarse event enums, approximate country/region derived from IP (never stored) | Legitimate interests (GDPR Art. 6(1)(f)) — no consent gate applies; Plausible is cookieless and stores/accesses nothing on your device |
If you're in California (or a similar U.S. state): because our analytics tool is self-hosted (not shared with any third party) and there is no advertising, using it does not count as a "sale" or "share" of personal information under the CCPA/CPRA.
7. Data retention
| Data | Retention |
|---|---|
| Wheel entries, mode/settings | Kept in your browser's `localStorage` until you clear them (the Clear tool, or clearing your browser's site data). We hold no copy and cannot delete it remotely. |
| Spin history / elimination order | Not retained at all — in-memory only, gone on refresh. |
| Analytics events | Aggregate Plausible statistics retained per our own dashboard configuration. The daily de-duplication hash is discarded within 24 hours regardless. |
| Server / edge logs (IP, browser type) | Kept by our host, Cloudflare, under its standard operational logging practices. |
8. Sharing, subprocessors & international transfers
- We don't sell your data, and nothing in this product creates a "sale" or "share" under California law.
- Plausible Analytics (self-hosted) — not a third party. Plausible runs on ZIX DEV Inc's own server (`plausible.zixdev.com`).
- Cloudflare (hosting). Our website runs on Cloudflare's global network — the only third party that sees the technical logs in §3 in the normal course of serving the site. Your entries never reach Cloudflare either, since they never leave your browser.
9. Your privacy rights
Depending on where you live, you may have the right to know/access, correct, delete, restrict/object to processing, and port your personal data. There is very little of the above to "hold" on our side — we have no server-side copy of your entries or spin history. Email contact@zixdev.com to exercise any of these rights; we respond within 30 days (GDPR) or 45 days (CCPA/CPRA), whichever applies. California residents: we honor your browser's Global Privacy Control (GPC) signal, though nothing here currently qualifies as a "sale" or "share" for it to affect.
10. Children's privacy
FateFlap isn't directed at children, and it's built for use by adults and teens (Hosts) — including teachers and event organizers who may type the names of children they work with (for example, students in a classroom) as wheel entries. Whoever is named in an entry, that entry is never collected by us: it's saved only in the Host's own browser and is never transmitted to ZIX DEV Inc or anyone else (see §2). Because we never receive or retain any entry — a child's name or anyone else's — in any form, we don't knowingly collect personal information from children under 13 (or the relevant age where you live) through this product, regardless of who types what into it. If you believe a child has provided us with personal information some other way (for example, by emailing us directly), contact contact@zixdev.com and we will delete it.
11. Changes to this policy & contact
We'll update this policy as our practices change and post the revised version here with a new effective date. Questions or requests: contact@zixdev.com, or by mail at ZIX DEV Inc, 1111B S Governors Ave STE 40023, Dover, DE 19904, United States.