Privacy policy

Last updated: 7 October 2026.

Wheel Pick Names is operated by Laszlo Kovacs, based in Hungary, who is responsible for the personal data we process. For privacy questions or requests, email contact@wheelpicknames.com.

Wheels, files and shared links

The wheel processes the entries you type and the files you import in your browser. Our application does not upload them to our servers. On ordinary wheel pages, your entries, wheel settings, result history and recent verification proofs are saved in your browser's local storage. Preferences such as theme, sound and full-screen settings are also saved there. Embedded wheels do not read or save your wheel history or preferences.

Share links and result links include their data after the # sign in the URL. Browsers do not include this fragment in HTTP requests, but anyone who receives the complete link can read its contents. A result proof can include the full entry list, weights and winner. Legacy embed URLs using ?names= put entries in the query string, which is sent to hosting servers and can appear in logs; use fragment-based share links instead. Encoding a link is not encryption. Other scripts running on a page may be able to read page content and the complete URL. Avoid entering sensitive information, and share other people's details only when you are entitled to do so.

Downloaded wheel files, result exports and proofs remain wherever you save or share them. Clear this site's data in your browser to remove locally saved wheels, results and preferences. Local storage has no automatic expiry, although your browser may remove it. Clearing data does not remove copies of files or links you have shared.

Hosting and Cloudflare Web Analytics

Cloudflare delivers and protects the site. It processes technical request data, such as IP addresses, requested URLs, browser information and security events, to provide hosting and prevent abuse. This is separate from Web Analytics.

We use Cloudflare Web Analytics to understand page visits and performance, including page-load times and Core Web Vitals. Cloudflare describes this service as cookieless: it does not use cookies or local storage, fingerprint visitors or track individuals across websites. Its beacon sends technical page and performance information to Cloudflare. We do not intentionally send wheel entries or result proofs as analytics data. See Cloudflare Web Analytics documentation and Cloudflare's privacy policy.

Google AdSense and advertising partners

We plan to fund the site with Google AdSense. The current application contains reserved ad spaces but does not load AdSense. When advertising is enabled, Google and other advertising partners may place or read cookies, use local storage and web beacons, and process IP addresses, device and browser information, identifiers and information about ad views or clicks. They may use these data to deliver and measure ads, limit how often an ad appears, prevent fraud and, with the appropriate permission, personalize ads based on visits to this and other websites.

Google's advertising cookies enable Google and its partners to serve ads based on your visits to this and other sites. Learn more at How Google uses information from sites or apps that use its services. Manage Google's ad personalization at My Ad Center. You can also learn about participating vendors' opt-out tools at YourAdChoices. These tools do not replace a consent choice on this site or necessarily stop all ads or storage.

Before advertising is enabled, we will provide the necessary consent and opt-out controls. In the European Economic Area (EEA), the United Kingdom and Switzerland, this includes a Google-certified consent management platform (CMP). Storage or processing that requires consent must wait for that consent. Non-personalized ads can still use cookies and are not automatically exempt. The consent message will identify the enabled partners and purposes.

Your privacy choices

The footer's Privacy settings link explains the available controls. When the advertising consent platform is enabled, you will be able to revisit your choices and withdraw consent through its controls. Withdrawing consent does not affect processing that was lawful before withdrawal. You can use the wheel without consenting to optional advertising purposes.

For US residents, advertising disclosures may count as a sale or sharing of personal information, or as targeted advertising, under applicable state law, even without a monetary payment. Where those laws apply, you may opt out through the advertising privacy controls, including “Do Not Sell or Share My Personal Information”, and through recognized opt-out preference signals such as Global Privacy Control (GPC). Advertising is not yet enabled, so there is currently no advertising sale, sharing or targeting to opt out of on this site. A browser's legacy “Do Not Track” setting does not itself change the site's operation.

Outside these regions, your local law may also require consent or provide opt-out rights. Contact us to exercise applicable rights. Using the site or accepting the terms is not consent to optional cookies or personalized advertising.

Messages you send us

If you email us, we receive your email address, your message and any information you choose to include. We use these to answer your request, troubleshoot problems or handle privacy matters. Cloudflare Email Routing forwards incoming messages to our Gmail inbox, provided by Google. These providers process correspondence to deliver and store it; see Cloudflare’s privacy policy and Google’s privacy policy. Please do not send entry lists or sensitive personal data unless necessary for your request.

Purposes, legal bases and retention

Where the GDPR applies, we rely on legitimate interests to operate and secure the site, understand its performance and answer ordinary enquiries; on consent for optional advertising storage and personalization where required; and on legal obligations when handling statutory requests or retaining legally required records. You may object to processing based on legitimate interests.

We delete correspondence within 30 days after the enquiry or request is closed, unless the law requires a longer retention period. In that case, we keep only the required records for the legally prescribed period. Hosting, security, analytics and advertising providers have their own retention periods depending on the service and settings, described in their notices. We do not maintain a server-side database of wheel entries. Contact us for information about retention relevant to your request.

Recipients and international processing

Data may be processed by Cloudflare, Google as our Gmail provider and, when advertising is enabled, Google and the advertising partners identified in the consent platform. Some providers act as processors; others determine their own processing purposes under their privacy notices. We may disclose information if legally required or necessary to protect legal rights.

Providers may process data outside your country, including in the United States. Where required for transfers from the EEA, UK or Switzerland, applicable safeguards must be in place, such as an adequacy decision or approved contractual clauses. The providers' privacy notices describe their transfer arrangements; contact us for information about safeguards relevant to data we control.

Your rights

Depending on the law that applies, you may request access, correction, deletion, restriction or portability of personal data, object to processing, withdraw consent, or opt out of sale, sharing or targeted advertising. Some US laws also provide an appeal right if a request is refused. We will explain applicable exceptions and appeal options in our response and will not discriminate against you for exercising your rights. We may need proportionate information to verify a request; please do not send identity documents unless asked.

Email contact@wheelpicknames.com to make a request. Locally saved data can be deleted through your browser; we cannot access or delete copies on your device remotely. You may also complain to your local data protection authority. In Hungary, this is the National Authority for Data Protection and Freedom of Information (NAIH).

Children and significant decisions

The site is a general-purpose tool, not a service directed at children under 13. We do not knowingly collect children's personal information for advertising. If you believe a child has sent us personal information, contact us. Adults using the tool with children should avoid identifiable entry lists and comply with applicable child privacy rules. The wheel does not make decisions about people with legal or similarly significant effects on our behalf.

Changes

We will update this policy when our practices change and show the revision date above. If a change requires a new consent choice, we will ask for it before the relevant processing begins.