Spin the Name 한국어

Privacy Policy

Last updated:

This policy covers Spin the Name (spinthename.net), a free wheel spinner, and explains what personal information is processed, why, and for how long. The site is run by an operator shown only by the alias Pin, who can be reached at contact@spinthename.net.

1. Why information is processed

Personal information is processed so that the operator can read and answer inquiry emails.

2. What is collected

When you send an email, the operator receives two things:

There are no accounts, no sign-up and no contact form. Sending an email is up to you, and the wheel works without one. Lists you type into the wheel stay in your browser and are not sent to a server by the site code; see section 3. Connection data that Cloudflare handles when you open the pages is described in section 7.

Lists you type are saved in your browser’s storage (localStorage), and the site code contains no code that sends them over the network. Picks are also made inside your browser, and spin history and results are not saved; they last only while the page is open.

The site saves these values in your browser:

To check that storage works, the page briefly writes a value named stn.probe and deletes it straight away. If your browser blocks storage or the storage is full, the wheel still works, but the list is lost when you close the page. Browsers may also delete stored data on their own after a period of time, depending on their settings.

Pressing “Copy share link” puts the items currently on the wheel into the link, after the “#” sign. The HTTP standard (RFC 9110) says the part after “#” is not sent in requests. The same standard notes that this part is visible to the browser and to extensions or scripts running as a result of the response. The site code contains only the site’s own scripts, and it loads no scripts from other addresses.

Anyone who opens a share link sees the list in it, so leave out names you do not want to pass on. Opening a shared list does not change your saved list, but if you edit the shared list in the item box, it becomes your list in this browser and takes the place of the one you saved before. The list you saved before is not deleted: it stays as one previous list, which the “Restore my previous list” button brings back. Pressing that button swaps the two lists, so the list you just edited becomes the previous list and the same button then reads “Back to the list I just edited”. A previous list is created when you first save after editing a shared list, and only if a list was saved before and it differs from the edited text. Only one previous list is kept: editing another shared list replaces it with the list saved at that moment, and the earlier previous list is kept nowhere.

4. Children

Children under 14 are not the main users the site is meant for. Under Korea’s Personal Information Protection Act, the legal representative of a child under 14 can make the requests in section 11 for that child.

5. How long emails are kept

Inquiry emails (the sender’s address and the content) are deleted once 6 months have passed since the operator replied. Inquiry emails that are not replied to are deleted once 6 months have passed since they were received. Inquiry emails whose retention period has passed are deleted without delay. Deletion means removing the email from the Gmail account used only for this site, where it is kept. Records that Cloudflare and Google keep under their own rules are separate from these periods; Cloudflare’s email routing records are described in section 7.

Wheel lists and settings are not information the operator keeps; they remain in your browser. Editing or emptying your own list in the item box leaves the previous list in place, and the site has no button that deletes only the previous list. The list and the previous list are one saved item, so when the browser clears the stored data of this site, both are cleared together.

6. Sharing with others

The operator does not pass inquiry emails to any other person or company, and does not sell them. What the companies that forward and store email do with it is set out in section 7.

7. Companies that handle email and pages

For forwarding email and delivering pages the site relies on Cloudflare, and for storing inquiry emails it relies on Google’s Gmail. The descriptions below of how each company handles information come from that company’s published documents.

Cloudflare: email forwarding

Mail sent to contact@spinthename.net is received by Cloudflare Email Routing and forwarded to the operator’s Gmail account used only for this site. Cloudflare’s documentation says its email routing records include the sender, recipient, subject, message ID and processing decision, and that this data can be queried, and is retained, for the past 31 days.

Cloudflare: page delivery

The site is set up so that its page files are uploaded to Cloudflare and Cloudflare delivers them to visitors. Cloudflare’s Privacy Policy (effective November 4, 2025) says Cloudflare processes the interactions of people who access or use its customers’ websites. It says this information may include IP addresses, traffic routing data and system configuration information, and is not limited to these. Cloudflare calls the part of this data that it makes available to customers through its dashboard or other online interface “Customer Logs”. The same policy says Cloudflare is a data controller for the personal information it collects, except for some data, including Customer Logs and content that passes through, or in some cases is stored on, its network, for which it is a data processor. Cloudflare’s Data Processing Addendum describes the customer as the controller (or a processor for another controller) and Cloudflare as a processor (or sub-processor). Cloudflare gives no fixed number of days for keeping personal information; it says it keeps it for a period consistent with the business purposes in section 3 of its policy, or as long as needed to meet legal obligations.

Where Cloudflare keeps information

Cloudflare describes itself as a U.S.-based global company that mainly stores information in the United States and the European Economic Area (EEA), and says it may transfer and access it from around the world, including other countries where the Cloudflare Group operates. For personal data moved from the EEA, Switzerland or the United Kingdom to the United States, Cloudflare says it relies on its certifications under the EU-U.S. Data Privacy Framework, the Swiss-U.S. Data Privacy Framework and the UK Extension to the EU-U.S. Data Privacy Framework, and on standard contractual clauses if those certifications lapse or become otherwise invalid. Cloudflare’s addendum for users in South Korea (effective July 13, 2026) lists the countries where personal information goes to Cloudflare, Inc. and its subsidiaries: the United States, the United Kingdom, Singapore, Australia, Germany, Portugal, France, Japan, Canada, the Netherlands, the UAE, India, Mexico, Malaysia and Sweden.

Google: storing inquiry emails

Forwarded inquiry emails are kept in a Gmail account that the operator uses only for this site. Google’s Privacy Policy (effective October 16, 2026) says Google collects the content people create, upload or receive from others when using its services, including email they write and receive. Inquiry emails in the operator’s Gmail account are therefore handled under Google’s policy. Google also says it has servers around the world, so information may be processed outside the country where a person lives, and that it applies the same protections wherever the information is processed.

8. Security

This site has no server-side database. The only place the operator keeps inquiry emails is the Gmail account used for this site. That Gmail account has 2-step verification turned on. The Cloudflare account that manages the site, the domain and email forwarding also has 2-step verification turned on.

9. Cookies and similar technology

The site code contains no code that reads or writes cookies. The only browser storage the site code uses is localStorage, and the values it saves are listed in section 3.

10. Ads and behavioural data

At present the site uses no ads and no analytics tools. Its code contains no advertising or analytics code, and it loads no scripts from other addresses. This policy will be revised before any ads are added.

11. Your rights and how to use them

If you have emailed the operator, you can ask to see your address and messages, to have them corrected or deleted, or to have their processing stopped, and you can withdraw consent you have given. If the GDPR applies to you, it also gives rights to restrict processing, to object to it and to data portability, and these requests can be sent the same way. Send any request to contact@spinthename.net, just as you would send a question. No account or form is needed. A request can also be made through an agent. Korea’s Personal Information Protection Act and its Enforcement Decree set 10 days to allow access after a request, and 10 days from receipt to report the action taken on a correction, deletion or suspension request. The operator answers access, correction, deletion, suspension and similar requests within 10 days of receiving them.

To help the operator find your message, write from the address you used before and mention the date you sent it. Because the site code does not send wheel lists or settings to the operator, you change them yourself. Edits in the item box are saved automatically, and settings are saved when you press the Sound or Reduce motion button or change the spin history order (Newest first or Order drawn). In the item box, changing or clearing your own list leaves the previous list as it is, and the site has no way to delete only the previous list. Clearing the data of this site in your browser removes the list and the previous list together. Cloudflare says that if an end user asks it to fulfil a rights request, it directs that person to the customer website they used.

12. Privacy officer and contact

Privacy questions, complaints and requests go to the privacy officer by email.

13. Complaints and where to get help

If the GDPR applies to you, you can lodge a complaint with a data protection supervisory authority. In Korea, these bodies take reports and give advice about personal information problems:

14. Changes to this policy

This policy takes effect on November 1, 2026. When this policy changes, the date of the change is shown on this page. The site shows that date automatically under the page title.