Spin Privacy Policy

Last updated: 31 October 2026

This policy covers the Spin app and the website at thespin.app. Spin is operated by RK Stacks LLC, Austin, Texas, United States ("we"). Questions or complaints about privacy: support@rkstacks.com.

The short version

Spin lets fans propose that two YouTube creators make something together, and doot on the proposals. To do that we hold your account details, the things you write and doot on, and a record of what you do in the app.

We do not sell or share your personal information for advertising. We do not run ads, and no third party serves ads or tracking in Spin. We do not track your precise location. If you leave your email on a share page, we keep your IP address with it, which shows roughly where you are.

What we collect, and why

When you sign in

Signing in uses Google or Apple. We receive and store:

• Your email address, to identify your account and to contact you about it
• Your name and profile picture from your Google or Apple account, until you change or remove the picture. Both are shown next to your comments; see "What other people can see".
• A sign-in token from Google or Apple, kept so your session works

Signing in is required to doot, to post an idea, or to comment. You can browse without an account.

If you connect your YouTube account

This is optional and separate from signing in. It exists so the spin wheel can draw from creators you already follow instead of only from our catalogue.

Spin uses YouTube API Services. By connecting your YouTube account you also agree to the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy.

If you connect it, we store:

• Your YouTube channel ID and handle
• The list of channels you subscribe to, refreshed when you ask us to
• An encrypted access token, so we can refresh that list without asking you to sign in again

We request read-only access. We cannot post, comment, subscribe, or change anything on your YouTube account.

Your subscription list is used to build your wheel and nothing else. It is not shown to other users, not shared with creators, not sold, and not used for advertising.

You can disconnect at any time in the app, which deletes the stored token and the subscription list. You can also revoke Spin's access from Google's security settings.

What you write and do

• Ideas and comments you post, and the doots and updoots you cast
• Messages, if you are a verified creator using creator-to-creator messaging
• Reports you file about other people's content
• Who you have blocked. Blocking records that you chose not to read a particular person. It is visible only to you. The person you blocked is never told, and no part of the app lets them find out.

Safety screening and moderation

Ideas and comments are screened automatically before they publish. The text is sent to Anthropic's Claude API, which checks it against two rules: no romantic or sexual content aimed at a real person, and no harmful or sexual content directed at a minor. We keep the verdict and a short internal note with your post.

If you break the rules, we record that your account was stopped from posting, when, and which of us did it. Keeping that record is what lets a decision be reviewed and undone.

If you upload a profile photo

We store a small copy of it, 256 pixels square, and nothing else about the file. Re-saving it removes everything your phone wrote into it, including the location where it was taken. We never keep the original.

Before it appears, it is screened automatically by Anthropic's Claude API: no nudity or sexual content, and nothing sexual or exploitative involving a minor. A photo that is refused is not stored.

How you use the app

We record events so we can tell whether the product works: that a spin happened, that a share link was tapped, that a sign-in prompt appeared, that a request failed or the app crashed. Each event carries a timestamp, what happened, and either your user ID or a random device identifier the app creates for itself if you are not signed in.

We use this to understand whether people come back and where the product breaks. It is not used to profile you or to target anything at you.

If you follow a shared link

This applies to people who have never used Spin and have no account.

When you open a Spin share link in a browser, we record:

• A random visitor ID, stored in a cookie on your device for 180 days, so that opening the same link twice counts as one person rather than two
• Where you came from: the referring page, which tells us that a link posted on Reddit worked. We keep both the full referrer and a shortened form.
• Your browser's user-agent string, which tells us what kind of device you used and whether the page opened inside another app's browser

This is used to measure whether sharing works. The visitor ID is never shared and is not an advertising identifier.

If you leave your email on that page, we use it to invite you to test Spin or to tell you when it launches. We also record which shared link you came from. Alongside your email we store:

• Your email address, exactly as you typed it
• Which page you were on, and the share and visit that brought you there, which includes who shared the link with you if they were signed in to Spin
• Your IP address, which shows roughly where you are

If you later sign in to Spin with the same email address, we can see that your account and your place on the list are the same person, including which shared link you originally came from, and the app opens once on the spin you signed up from.

If a shared link opens the app

If you already have Spin and a shared link opens it, the app tells us which share it was, so we can see whether sharing brings people to Spin. If you were not signed in, we record that this device arrived through that share.

Purchases

If you buy Super Doots, the purchase is handled by Apple or Google. We store the store's transaction ID, which store it came from, and the price the store reported. We never see your card details.

Cookies and similar technologies

• On thespin.app, one cookie: the random visitor ID described under "If you follow a shared link", kept for 180 days. There are no advertising or third-party tracking cookies.
• In the app, a random device identifier is kept in the app's own storage so events from before you sign in can be counted. It is not an advertising identifier, and Spin does not ask to track you across other companies' apps.
• Creator pictures in the app and on the website are loaded from YouTube's servers, so your device contacts Google when they load. Google's handling of that is covered by the Google Privacy Policy.

Spin does not track you across other websites, so browser "Do Not Track" settings change nothing here.

Why we use it

Where the law asks us to name a legal basis (for example the GDPR in the EU, or the UK GDPR), these are ours:

What we do not collect

• Your IP address, except as above when you leave your email on a share page. Otherwise it is used briefly in memory to limit abuse and is never written to our database.
• Your precise location, contacts, photo library, calendar, or health data. The app only sees a photo you choose to upload.
• Anything from your YouTube account beyond your channel identity and your subscription list.

What other people can see

• Ideas and comments are public, including to people who are not signed in.
• Your name is not shown next to an idea. Ideas are deliberately unsigned, so that people back the best argument rather than the person they recognise. Your name does appear on comments.
• Your profile picture appears next to your comments, to anyone.
• Your YouTube handle is not shown unless you choose to show it.
• Doots are private. Nobody sees how you dooted.
• Blocking is private. The person you blocked is not told and cannot tell. Their comments still appear normally for everyone else; blocking hides them from you, it does not remove them.
• Your email address is never shown to another user. It is visible only to us, on an internal page used to operate the service.
• Your subscription list is never shown to anyone.

Who we share it with

We do not sell personal information, and we do not share it for advertising. We share it only with the services that run Spin, which process it on our behalf:

We will also disclose information where the law requires it, and where we must report content involving the safety of a minor. If RK Stacks LLC or Spin is ever sold or merged, your information would move with it, under this policy.

Where your data is stored

Spin's servers and database are in the United States (Google Cloud, us-central1). If you use Spin from outside the United States, your information is transferred to and processed in the United States.

How we protect it

All traffic to Spin is encrypted in transit (HTTPS). The database is encrypted at rest by Google Cloud, and YouTube access tokens are additionally encrypted by us before they are stored. Access to personal information is limited to the people who operate Spin. No system is perfectly secure; if a breach affects your information, we will tell you as the law requires.

How long we keep it

• Your account and content: until you delete your account.
• Share-link visitor records: the cookie expires after 180 days.
• The email list: until you ask us to remove you. Email support@rkstacks.com and we will.
• Event records: kept while they are useful for understanding the product.
• Removed content: when a post is taken down it is hidden, not deleted, so the decision can be reviewed and reversed. It stops being visible to anyone but us.

Your choices and rights

In the app:

• Disconnect YouTube at any time, in the app or from Google's security settings.
• Change or remove your profile picture from the Me screen. Removing it deletes the photo, and it stays removed when you next sign in.
• Block someone, from the ⋯ on any of their comments, and unblock them from the Blocked screen under Me.
• Delete your account, from the Me screen. This permanently erases your name, email address, profile picture, sign-in tokens, device records, and your YouTube connection and subscription list. It cannot be undone, and signing in again creates a new, empty account. Ideas and comments you wrote stay, with no name attached, shown as [deleted] where a name would be, because deleting them would also delete the replies other people wrote underneath.

By email to support@rkstacks.com, wherever you live, you can ask us to:

• tell you what we hold about you and send you a copy
• correct it
• delete it
• stop using it for a purpose based on legitimate interests
• withdraw a consent you gave

We answer within 30 days and will not treat you differently for asking. If you are in the EU or UK and are not satisfied with our answer, you can complain to your local data protection authority.

If you live in California

In the past 12 months we have collected these categories of personal information: identifiers (email, name, account and device IDs, IP address for the email list), internet or other electronic network activity (usage events, share and visit records), user content (ideas, comments, messages, photos), and commercial information (purchases). The sources, purposes and recipients are the ones described above.

We do not sell personal information, and we do not share it for cross-context behavioural advertising. We do not use sensitive personal information to infer anything about you. You have the right to know, delete and correct, and to not be discriminated against for exercising those rights; use the email above.

Children

Spin is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, email support@rkstacks.com and we will delete it.

Young creators may be suggested on Spin, which is not the same thing: that is public information about a public channel, and it carries no account.

Changes

If we change this policy we will update the date at the top. If the change is significant we will tell you in the app before it takes effect.

Contact

support@rkstacks.com RK Stacks LLC, Austin, Texas, United States