Wheel of Misfortune
Privacy Policy
Last updated 12 July 2026
This policy explains what personal data Wheel of Misfortune (“we”, “us”) collects when you use the game, why we collect it, and the rights you have. We are the data controller for the purposes of the UK GDPR and the Data Protection Act 2018.
Data we collect
| Data | Why we hold it | Lawful basis |
|---|---|---|
| Email address | To create and secure your account, sign you in, send account emails, and let teammates invite you. | Contract |
| Display name & optional avatar image | So other players can recognise you in teams and leaderboards. | Contract |
| Team & game activity | Teams you join, spins, holdings you record, prices captured, competitions and trophies - the state of the game itself. | Contract |
| Technical data | Your IP address is used briefly to rate-limit sign-ups and verify the anti-bot check. Standard server logs are kept short-term. | Legitimate interests (security) |
The stock tickers and amounts you record are information you enter into a game. We do not hold any money for you, we do not connect to your bank or broker, and we cannot buy, sell, or move any real assets. See our Terms for more.
Who processes data on our behalf
We use a small number of trusted providers (“processors”) to run the service:
- Supabase - account authentication and database hosting (data stored in the UK/EU, London region).
- Cloudflare Turnstile - a privacy-friendly anti-bot check on the sign-in and sign-up forms.
- Resend - delivery of account and game emails.
- Vercel - application hosting, and Google Fonts for typography.
How long we keep it
We keep your account and game data for as long as your account exists. If you ask us to delete your account, we remove your personal data, though anonymised or aggregate game records may remain. Short-term technical logs rotate automatically.
Your rights
Under UK data protection law you can ask us to: access a copy of your data; correct it; delete it; restrict or object to how we use it; or receive it in a portable form. You can exercise most of these yourself from Account settings in the app (name, email, avatar, password) or by contacting us. You also have the right to complain to the Information Commissioner’s Office (ICO).
Children
Wheel of Misfortune is intended for adults (18+) and is not directed at children. We do not knowingly collect data from anyone under 18.
Storage on your device
For details of what we store in your browser (such as your login session and cookie choice), see our Cookie & storage policy.
Changes
We may update this policy from time to time. When we do, we’ll change the “last updated” date above and, for significant changes, let you know in the app.
Contact
For any privacy question or to exercise your rights, email privacy@wheelofmisfortune.co.uk.