Short version: TwirlPick counts page views with Google Analytics 4 and never receives your entries. The sections below say what stays in your browser, what that counter records, what a verifiable draw sends, what the host of the site still sees and what your browser loads.
In your browser
Your last wheel on each tool, wheels you save, recent results, tallies and your theme choice are kept in this browser's local storage, and the site's files are cached for offline use. Clearing this site's data removes all of it. None of it is sent to us or to the page counter.
Links you share
A wheel link contains the wheel itself after the # sign. Browsers do not send that part to servers, and the page counter does not record it, but anyone you give the link to can see the entries, so do not put private information in a shared wheel. Proof links and Secret Santa links keep their contents after the # sign in the same way.
Analytics and cookies
Page views are counted with Google Analytics 4. It records the page, the referring link, your browser and device type, an approximate location from your IP address and a device identifier; we read it as totals per page and never look up an individual.
It records the address of a page without the part after the # sign, so the entries of a wheel link, a proof link or a Secret Santa link do not reach it. Page titles are fixed for each page and never include the name of a wheel or a winner, and the counter does not receive what you type into the pickers.
Advertising storage, advertising user data and advertising personalization are refused on every page and in every country, so nothing measured here feeds advertising profiling. In the European Economic Area, the United Kingdom and Switzerland the analytics storage is refused as well, by default and without asking: those visits still reach Google as page views, but the counter writes nothing to your device and keeps no identifier from one page to the next.
Outside those countries, and except on the classroom pages described next, Google Analytics 4 sets its own cookies under Google’s privacy policy, named _ga and _ga_ followed by the property identifier; they tell one browser from another, so a second page in the same visit is not counted as a second visitor. Inside those countries it sets none. No advertising cookie is set on any page. The site itself adds none of its own; what it keeps in your browser’s local storage (wheels, results, tallies and the theme) stays on this device. The pickers work the same if you block the counter with a content blocker or Google’s opt-out browser add-on.
Classroom pages are measured differently, because teachers show them on a projector or a shared screen and students may sit at the device. These are the classroom pages: Student picker, Random group generator, Random team generator, Number wheel, Random letter generator, Brain break wheel, Classroom jobs wheel, Reading questions wheel, Ice breaker questions wheel, Would you rather wheel, Truth or dare wheel (family), US states wheel and Random color generator. On these pages the analytics storage is refused for every visitor in every country, the United States included: Google Analytics 4 sets no cookies for anyone and sends Google only cookieless pings, the page view and events on that page such as a scroll, with no identifier kept from one page to the next. The advertising storages are refused there as on every other page, and what is typed into the wheels and pickers does not reach the counter on these pages either.
Embedded wheels, the /embed/ page that other websites can show in a frame, do not load Google Analytics 4 at all, so a wheel shown on someone else’s site is not counted and sets no cookie of ours.
Verifiable draws
When you run or check a verifiable draw, the page asks the drand beacon (api.drand.sh and mirrors) for one round number's random value. That request contains the round number only, not your entries. Your browser connects directly to these public beacon hosts (run by the League of Entropy and Cloudflare), which, like any website, see your IP address and browser type.
Advertising
The site does not show advertising at present.
What your browser loads
Your browser fetches two outside services on the pages of this site, and this is the whole list:
Google Analytics 4 — counts page views so we can see which pages are read, on every page except embedded wheels. Your browser fetches it from www.googletagmanager.com and sends the page views to Google’s collection servers under google-analytics.com and analytics.google.com, and outside the European Economic Area, the United Kingdom and Switzerland, except on the classroom pages, it sets its own cookies under its own policy.
The drand randomness beacon — supplies the public random number that decides a verifiable draw, only while you run or check one. Your browser asks api.drand.sh, api2.drand.sh or drand.cloudflare.com for one round number, and the request carries that number only.
Everything else — the pickers and their code, the ready-made wheels, images and styles — is served from this domain.
Hosting
Our host (Cloudflare) keeps standard server logs such as IP address and requested page.
Schools and children
TwirlPick is made for teachers, parents and other adults, who run the pickers for a class or a family, and we do not knowingly collect personal information from children. Student names typed into TwirlPick stay in the teacher's browser: they are not uploaded and they do not reach the page counter. Avoid sharing wheels with full student names as public links. TwirlPick has no accounts and never asks anyone, child or adult, for a name, an email address or other contact details. On the classroom pages listed above the counter keeps no identifier for anyone, so a student at a classroom device shows up in the totals of a page but is not recognized from one page to the next; on the other pages it counts the visits of everyone who opens them, and we read it only as totals per page. Younger students should use TwirlPick with a teacher or parent.
Your rights
TwirlPick has no accounts, so we hold no account data about you. The page-view records described above are kept by Google Analytics 4 for us; outside the classroom pages and the countries named above they are tied to a random device identifier, and never to a name or an email address. Server logs are kept by Cloudflare for its standard period for security and abuse prevention, which is our legitimate interest. You can ask us what we hold, ask for deletion or object by email, and, in the EU or UK, complain to your data-protection authority. We do not sell personal information or share it for advertising.
Who we are
TwirlPick is run by BiLingoPlus LLC. This policy was last updated on October 6, 2026; changes are posted on this page.