Privacy Policy

SpinAndWheel for Google Meet™ · Last updated: October 17, 2026

This Privacy Policy describes how Spin And Wheel ("the Company", "We", "Us" or "Our") handles information when You use SpinAndWheel for Google Meet™ (the "Add-on"), the add-on for Google Meet™ published by Us on the Google Workspace™ Marketplace and served from spinandwheel.com/meet/. It supplements the Privacy Policy of spinandwheel.com, which continues to apply to the website itself. Where the two differ for the Add-on, this document prevails.

In short

The Add-on has no user accounts and no sign-up. Your draft wheel is stored in your browser.
When you start an activity, the wheel (title, options, settings, results) is kept in a shared room on Google's Firebase™ service so everyone who joins sees and spins the same wheel. The room is deleted when the host ends the activity, and at the latest after 24 hours.
"Use current participants" reads the display names of people in the call through the Google Meet™ API, only after you allow it, and only to fill the wheel. The names are kept only as wheel options, like text you type.
Optional, cookieless usage analytics may run. It never contains the text on your wheel. No advertising, no session recording.

Interpretation and Definitions

Words with an initial capital letter have the meanings below, in singular or plural.

Add-on means SpinAndWheel for Google Meet™, comprising the side panel and main stage pages under spinandwheel.com/meet/.
Company refers to Spin And Wheel, the operator of spinandwheel.com. Country refers to Ukraine.
Google Meet™ is the video conferencing service operated by Google LLC / Google Ireland Limited ("Google"), which hosts the Add-on inside a meeting. Google Meet™ and Google Workspace™ are trademarks of Google LLC; SpinAndWheel is not affiliated with, endorsed by or sponsored by Google.
Host means the participant who starts the SpinAndWheel activity in a meeting. Participant means any other person in that meeting.
Wheel Data means the wheel title, the list of options (entries), the settings and the spin results that You create with the Add-on.
Personal Data is any information that relates to an identified or identifiable individual.
You means the individual using the Add-on, or the organisation on whose behalf that individual uses it.

What the Add-on Does

The Host configures a wheel in the Google Meet™ side panel and starts an activity. Every Participant who joins the activity sees the same wheel on their main stage and in their side panel, and can spin and edit it, unless the Host locks the wheel so that only the Host can change it. The Add-on has no user accounts and no sign-up.

Data We Process

Wheel Data, stored in Your browser

Wheel Data is kept in Your browser's localStorage on the spinandwheel.com origin so that reopening the panel or reloading the main stage restores it. The Add-on also stores the meeting code of the call in which You started an activity, together with a random activity identifier and a random host key, so that a reopened panel knows You are the Host, and a random browser identifier used only to avoid playing the spin sound twice. This storage is first-party, is not sent to Us, and is removed when You clear your browser data. You can also empty the wheel with Clear all.

Wheel Data in the shared activity (Firebase™)

When You start an activity, the Add-on creates a shared room in Firebase™ Realtime Database, operated for Us by Google LLC / Google Ireland Limited as Our processor under the Firebase Data Processing and Security Terms. The room holds the Wheel Data (title, options, settings, the current spin and the last winner) and whether the Host has locked the wheel. Each browser that opens the activity signs in to Firebase™ anonymously: Firebase™ issues a random identifier that is not linked to Your name, email address or Google™ Account.

Who can see it: only Participants who join the activity in the meeting. The room is addressed by a random 128-bit identifier that Google Meet™ passes to them as the activity's starting state; it is not listed or searchable.
Who can change it: every Participant in the activity, unless the Host locks the wheel. Firebase™ security rules enforce the lock.
How long: the room is deleted when the Host ends the activity. A room that was not ended stops being readable 24 hours after it was created and is deleted by a daily clean-up.
Where: Google's data centres for the Realtime Database instance We selected. Data is encrypted in transit.

The activity's starting state (the room identifier and a copy of the wheel for a fast first display) is also passed through Google Meet™ and processed by Google under the Google Privacy Policy and Your organisation's Google Workspace™ agreement. The text You put on the wheel is visible to everyone in the activity. Do not place information on the wheel that You do not want other Participants to see.

Participant names via the Google Meet™ API

The side panel offers a button Use current participants. When You press it for the first time, Google asks You to grant the Add-on the permission "See information about the meeting spaces You have access to" (OAuth scope https://www.googleapis.com/auth/meetings.space.readonly). With that permission the Add-on, running in Your browser, calls the Google Meet™ REST API to read the display names of the people currently in Your call and places those names on the wheel.

Data used: the meeting code of the current call, the identifier of the active conference, and the display names of current participants. No email addresses, user IDs, recordings or transcripts are requested.
Where it goes: the request is made directly from Your browser to Google. The names You place on the wheel become part of Your Wheel Data (see above): they are stored in Your browser and, during an activity, in the shared room, and are treated like any other option You typed. They are deleted with the room.
Access token: the token Google issues is held in memory in Your browser for at most one hour and is never written to storage or transmitted to Us.
Revoking: You can withdraw the permission at any time at myaccount.google.com/permissions. The rest of the Add-on keeps working without it.

SpinAndWheel's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, We do not use Google user data for advertising, do not sell it, do not allow humans to read it, and do not transfer it to anyone except as needed to provide the feature You requested, to comply with law, or as part of a merger or acquisition with prior notice.

Usage analytics (optional, cookieless)

The Add-on may send anonymous usage events to Google Analytics™ 4 (Google LLC / Google Ireland Limited) to understand which features are used, for example "activity started", "spin completed" or "preset selected", together with counts such as the number of options. The public pages at spinandwheel.com/meet/ (home, support, legal pages) also send a page view with the page address (without query parameters). Events never contain the text on Your wheel, participant names, meeting codes or Your identity. Analytics runs with client storage disabled, so it sets no cookies and stores no identifier on Your device: every page load is counted as a new, anonymous visitor. Advertising storage is denied, and Google Analytics™ 4 does not log or store IP addresses. It is disabled entirely in development and mock mode. Legal basis (EU/UK): legitimate interest in improving the Add-on (Art. 6(1)(f) GDPR), given the minimal, non-identifying nature of the data. You can block analytics scripts at the browser level at any time; the Add-on keeps working.

What the Add-on does not do

No advertising and no advertising cookies. The Add-on does not load Google AdSense.
No session recording or heatmaps. The Add-on does not load Hotjar.
No accounts, passwords, payments or contact details are collected.
No audio or video of the meeting is accessed. The Add-on cannot see or hear the call.

Data We Receive from Google Meet™

To run inside a meeting, the Add-on receives from the Google Meet™ add-on SDK the reason the panel was opened, the meeting code and meeting identifier, and the activity's starting state. These values are used only in Your browser to decide what to show and, for the meeting code, to remember that You are the Host. The meeting code is not sent to Firebase™. Google's handling of Your meeting is described in Google's own privacy documentation.

Hosting

The Add-on's pages are static files delivered through Amazon Web Services (Amazon S3 and Amazon CloudFront, Amazon Web Services EMEA SARL / Amazon Web Services, Inc.). Like any web host, AWS may log the IP address, user agent and requested URL of each page load for security and operational purposes, with short retention. We do not use these logs to identify individuals. The shared rooms are stored in Firebase™ as described above.

Retention

Wheel Data and the Host flag: in Your browser until You clear it, or until Your browser evicts it.
Shared rooms (Firebase™): until the Host ends the activity; unreadable after 24 hours and deleted by a daily clean-up otherwise. The anonymous Firebase™ identifier stays in Your browser until You clear site data.
Google API access tokens: in memory only; discarded when the panel closes and expired by Google within one hour.
Analytics events: retained by Google Analytics™ for 14 months in aggregated form.

Your Rights

Because the Add-on keeps Your data in Your own browser, You exercise most rights yourself: view or edit the wheel in the side panel, delete it with Clear all or by clearing site data for spinandwheel.com, and revoke the Google permission as described above.

If You are in the European Economic Area, the United Kingdom or Switzerland, You have the rights of access, rectification, erasure, restriction, portability, objection and withdrawal of consent, and the right to lodge a complaint with a supervisory authority. If You are a California resident, You have the right to know, delete and correct personal information and to opt out of its sale or sharing. We do not sell or share personal information collected through the Add-on. To exercise any right that You cannot exercise yourself, contact Us at the address below.

Children's Privacy

The Add-on is a workplace and classroom tool for Google Meet™ users and is not directed to children under 13. We do not knowingly collect Personal Data from children. If You believe a child has provided Us with Personal Data, contact Us and We will delete it.

International Transfers

Google and AWS may process the limited data described above in the United States and other countries. Both rely on the EU–U.S. Data Privacy Framework and Standard Contractual Clauses for transfers from the EEA, the UK and Switzerland.

Security

The Add-on is served only over HTTPS and is permitted to run only inside Google Meet™. No method of transmission or storage is completely secure, and We cannot guarantee absolute security, but We design the Add-on to hold as little data as possible.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the new version at this address and update the "Last updated" date. Material changes will be announced in the Add-on or on the Marketplace listing before they take effect.

Contact Us

Questions about this Privacy Policy or Your data: spinandwheel@gmail.com.

Google™, Google Meet™, Google Workspace™, Google Analytics™ and Firebase™ are trademarks of Google LLC. SpinAndWheel is an independent product and is not affiliated with, endorsed by or sponsored by Google LLC.