Privacy Policy

Last updated: February 7, 2026

1. Who We Are

Wheel of Fortune is a stream overlay application created by Patryk Skierkowski. This policy explains how we collect, use, and protect your data when you use the application.

2. What Data We Collect

When you log in via Kick OAuth, we collect and store:

• Kick username and broadcaster ID (public profile information)
• OAuth access and refresh tokens (encrypted with AES-256-GCM)
• Wheel configuration (prizes, tiers, accent color)
• Spin state (pending spins, delay timers)
• Event subscriptions (webhook subscription IDs)

We do not collect passwords, payment information, viewer personal data, or any data beyond what is needed for the wheel overlay to function.

3. How We Use Your Data

• To authenticate you with Kick and manage your session
• To subscribe to Kick channel events (gifted subscriptions) on your behalf
• To deliver wheel spins to your OBS overlay
• To store and serve your wheel configuration

4. Data Storage and Security

• All data is stored in an SQLite database on the hosting server
• OAuth tokens are encrypted at rest using AES-256-GCM with a server-side key
• HTTPS is enforced for all connections
• Sessions use secure, signed cookies
• The application is hosted on Render (render.com)

5. Third-Party Services

We interact with the following third-party services:

• Kick (kick.com) -- for OAuth authentication and webhook events
• Render (render.com) -- for application hosting

We do not share your data with any other third parties, advertisers, or analytics services.

6. Data Retention

Your data is retained for as long as your account is active. If you wish to have your data deleted, please contact the administrator. Upon deletion, all your configuration, tokens, and spin history will be permanently removed.

7. Your Rights

You have the right to:

• Access the data we store about you (visible in the dashboard)
• Request deletion of your account and all associated data
• Revoke OAuth access at any time through your Kick account settings

8. Cookies

We use a single session cookie (wheel_sess) for authentication. It is HTTP-only, signed, and contains only your session identifier. No tracking cookies or third-party cookies are used.

9. Contact

For any privacy-related questions or data deletion requests, please contact:
Patryk Skierkowski

← Back to Wheel of Fortune