Privacy policy

• Your wheels, lists and results live in your browser; our server never stores them.
• There is no account, no advertising and no audience-measurement tool on the site.
• The only cookie remembers the language you choose.
• Apart from the technical logs every web server keeps, we receive personal data only when you write to us or import YouTube comments.

The data controller is [COMPANY NAME], the agency behind LuckyWheel (evisibility.ma), established at [ADDRESS], Morocco. You can reach us through the contact form or at [EMAIL ADDRESS]. Full company details are in the legal notice.

Everything you type into a wheel, along with your results, scores, settings and deleted wheels, is saved in the local storage of the browser you are using. We have no copy of it, so we cannot see, restore or delete it for you. Clearing this site’s data in your browser erases it, and private browsing windows forget it when they close.

Share links work the same way. A shared wheel is encoded in the fragment of the link, the part after the # sign, which browsers leave out of their requests: its content never reaches us or our logs. Anyone who receives the link can open the wheel, so share it only with people you trust with its content. QR codes and result images are created on your device too.

Two exceptions are worth knowing. If JavaScript is turned off, the basic version of the wheel sends your entries to our server once, to draw a winner; they are used to display the result and are not stored. And if you turn on “Read the winner aloud”, your browser’s speech engine reads the result; some browsers use an online voice service from their maker for this.

The contact form asks for your name, email address, a subject and your message. When you send it, these details are emailed to our team along with the page language, the page address and the date. Nothing is saved in a database on the website’s server. We use them only to answer you and, for business requests, to prepare a proposal. The legal basis is our legitimate interest in replying to the messages we receive or, for a quote, the steps you ask us to take before a contract.

We keep these emails as long as needed to handle your request and any follow-up, and no longer than 12 months after our last exchange (3 years for a business enquiry). They are never sold, rented or used for advertising. To block spam, the form also keeps a coded fingerprint of your IP address (a keyed hash, not the address itself) for 24 hours at most, so that no one can send more than 5 messages per hour.

Like any website, LuckyWheel runs on a server operated by our host, [HOSTING PROVIDER]. For each request, the server records technical logs: IP address, date and time, page requested, browser type and referring page. They serve only to keep the site secure and working, are never used to build profiles, and are deleted after [LOG RETENTION PERIOD].

To see how people find the site, we read the aggregated statistics of Google Search Console and Bing Webmaster Tools. These reports come from the search engines themselves and involve no script or cookie on our pages.

LuckyWheel sets a single cookie, lh_lang, only when you pick a language in the language menu. It keeps your choice for 12 months so that our home address opens in your language. Your wheels and settings use local storage, which stays on your device and is never sent with your requests. Both are needed for features you ask for, which is why no consent banner is shown. The full list is in our cookie policy.

Teachers often put students’ first names on a wheel. Those names stay on the teacher’s device and are never sent to us, and classroom mode hides the sharing buttons. We still recommend first names or initials only. The site has no account, chat or public gallery, so children cannot publish anything or talk to strangers on it. If you are under 16, please ask a parent or teacher before you use the contact form.

The site is hosted by [HOSTING PROVIDER] in [HOSTING COUNTRY]. When data such as server logs or contact emails is processed outside Morocco, the transfer complies with law 09-08, with the authorization of the CNDP where required, and, for visitors in the European Union, with the safeguards of the GDPR.

When you import comments in the YouTube comment picker, your browser sends the video identifier to our server. The server queries the YouTube API Services, provided by Google, and returns the video’s public comments to your browser: the author’s name, the comment text and its date. Our server, not your browser, contacts YouTube. No YouTube or Google account is accessed, and you are never asked to log in.

To save API quota, these responses are kept in a server cache for 10 minutes at most, then deleted. Filtering and the draw happen in your browser, and the comments are used for nothing else. The legal basis is our legitimate interest in providing the feature you use. To prevent abuse, the server keeps a keyed hash of your IP address (not the address itself), used only to count imports and deleted within 24 hours.

The imported comments come from YouTube and are subject to the YouTube Terms of Service and the Google Privacy Policy. Their authors can edit or delete them on YouTube at any time.

Under the EU General Data Protection Regulation (GDPR) and Moroccan law 09-08 on the protection of individuals with regard to the processing of personal data, you can ask to access, correct or delete your data, object to its use, restrict it or receive a copy. Since we hold almost nothing besides contact emails, one message is usually enough: use the contact form or write to [EMAIL ADDRESS]. We reply within one month.

You may also lodge a complaint with Morocco’s data protection authority, the CNDP (Commission nationale de contrôle de la protection des données à caractère personnel), or with the supervisory authority of your country in the European Union. CNDP declaration number: [CNDP NUMBER].

If we ever add advertising or audience measurement, this policy will be updated before anything is switched on, and you will be asked for your consent wherever the law requires it. The update date at the end of this page tells you which version you are reading.