Privacy Policy
At PickLab, we believe privacy is an engineering commitment, not just a legal document. Our decision tools, wheels, coin flips, and generators run 100% locally in your web browser.
Zero Server Storage
Your lists, names, numbers, and decisions never leave your device or reach our servers.
Zero Tracking Cookies
We use no analytics trackers, tracking beacons, cross-site pixels, or third-party ads.
Hardware CSPRNG
Entropy is queried directly via your device's native Web Crypto API (crypto.getRandomValues).
Local Control
All settings and custom lists live in your browser's localStorage. Clear them anytime in 1 click.
1. Architectural Privacy Philosophy
Most web applications route your inputs, choices, names, and activity through remote web servers and third-party tracking databases. PickLab was purposefully engineered with an opposite paradigm: Pure Client-Side Computation.
When you spin a prize wheel, flip a 3D coin, roll a polyhedral die, or partition a classroom into teams, 100% of the mathematical algorithms, physics simulations, sound synthesizers, and graphics rendering occur exclusively inside your web browser. No telemetry packet or input log is ever emitted to our servers.
2. Information We Do Not Collect
To provide maximum transparency, here is an explicit list of data categories we do not collect, harvest, store, or sell:
- Custom Entries & Wheel Slices: We do not log the names, prizes, numbers, or text items you input into our tools.
- Random Decision Outcomes: We do not record which slice won, which coin face landed, or which dice rolled.
- Personal Identifiers: We do not require accounts, logins, email addresses, phone numbers, or credit cards to use our suite.
- Behavioral Profiles: We do not profile your usage patterns, build behavioral advertising segments, or sell data to brokers.
- Tracking & Retargeting Cookies: We do not deploy Meta Pixel, Google Ads remarketing tags, TikTok pixels, or cross-site tracking scripts.
3. How Local Storage Is Used
To save you time when returning to PickLab, our application uses your browser's built-in Window.localStorage API. This storage remains entirely on your machine and cannot be read by any other website.
| Key / Item | Purpose | Location |
|---|---|---|
| spinweel-theme-mode | Remembers your preference for Dark Mode or Light Mode. | Browser LocalStorage |
| spinweel-lang | Remembers your preferred UI language (out of 10 supported languages). | Browser LocalStorage |
| spinweel-sound-enabled | Saves whether audio effects and spin sounds are enabled or muted. | Browser LocalStorage |
| picklab_custom_lists | Preserves your custom wheel lists, coin histories, and saved teams between sessions. | Browser LocalStorage |
You can clear all PickLab data from your browser at any time by clearing your browser cache or clicking "Reset All Data" in your browser developer settings.
4. Cryptographic Hardware Randomness
Conventional web randomizers use standard pseudo-random number generators (Math.random()), which are deterministic and susceptible to prediction or bias.
PickLab implements the W3C Web Cryptography API (window.crypto.getRandomValues), which pulls physical entropy directly from your operating system and CPU (such as thermal noise and keystroke timing jitter).
5. Hosting & Infrastructure Providers
To deliver web assets at ultra-low latency worldwide, PickLab relies on high-tier edge infrastructure:
- Vercel Edge Network: Hosts the static HTML, CSS, and JavaScript bundle. Like all edge networks, Vercel may process standard HTTP server logs (such as IP address, user-agent, and HTTP status) for DDoS mitigation, load balancing, and edge caching.
- Google Fonts: High-performance typefaces (Plus Jakarta Sans & Outfit) are fetched via Google's secure font CDN. Google does not set tracking cookies when serving fonts.
6. Your Rights & Data Deletion (GDPR & CCPA)
Under global privacy frameworks including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and UK Data Protection Act:
- Right of Access & Portability: Because we do not store your data on servers, your data is already 100% in your custody within your local browser.
- Right of Erasure ("Right to be Forgotten"): You can erase all data instantly by clearing your browser's site data for
getpicklab.com. We have no copies on any server to delete. - Right to Opt-Out: We do not sell or share personal information with data brokers or ad networks.
7. Children & Educational Use (COPPA/FERPA)
PickLab is widely used by K-12 educators, universities, and STEM clubs for student name pickers and math probability experiments.
Because PickLab collects zero personally identifiable information (PII) from any user, our service is fully compliant with the Children's Online Privacy Protection Act (COPPA) and Family Educational Rights and Privacy Act (FERPA). Teachers can input student rosters with absolute peace of mind that student names remain safely within the teacher's classroom computer.
8. Contact Our Privacy Team
If you have questions about our cryptographic implementation, local storage usage, or architectural security, please contact our team: