Privacy notice
SpinDeck uses account information to sign you in and run your workspace. Viewers can participate through supported platform chats without creating a SpinDeck account.
Information used by the service
- Creator accounts: email address, display name, account settings, sign-in identities, login times and an optional profile image. Email/password accounts store a password hash.
- Rounds: settings, accepted entries, platform account identifiers, display names, avatars, entry messages, available chat badges, selected winners and encrypted prize codes.
- Security: session cookies, IP addresses, user agents and application security events.
Google and other sign-in providers
Google sign-in requests OpenID, basic profile and email access. Google supplies a verified account identifier, email address, name and optional profile image so SpinDeck can authenticate you, create or link your workspace, and display your account identity. Twitch and Kick sign-in use their corresponding account identity and available profile information.
Provider tokens are used during sign-in verification and discarded afterward. They are not saved in the sign-in identity table. Google sign-in does not request Gmail messages, Drive files, Contacts or your Google password. Your Google identity is used for the account features described here.
Linking a provider to an existing account requires signing in to that account first. You can manage linked sign-in methods at Account connections and revoke Google access in your Google Account. Revoking provider access does not itself delete stored SpinDeck data.
What other people and services can see
Public round pages and broadcast overlays show participant display names, avatars, entry platforms and results. Hosts can access their round information. People who receive a private prize claim link can reveal its stored prize code; hosts should send those links privately.
The service uses hosting and network infrastructure to process and store data. Sign-in and chat connections communicate with the selected provider. Third-party fonts, avatars and embedded video players can contact their respective providers, which apply their own privacy practices. Support messages are processed through SpinDeck's email service.
Storage and retention
Account, sign-in identity and round records remain stored until removed through available controls or by the operator. There is currently no automatic account deletion. Application security logs are cleaned after 30 days; server logs and backups are managed separately. Deleting live data may not immediately remove copies from backups.
Questions, corrections and deletion requests
Email support@spindeck.gg for privacy questions or to request access, correction or deletion of your account data. Include enough information to identify the account, but never send your password, provider token or private prize code. SpinDeck may need to verify ownership before acting on a request.
Updates
Changes to this notice will be published here with an updated date.