The short version
No accounts, no advertising, and no uploads of your entries. Tools run locally in your browser. The site's own server counts page views without cookies (see Visit statistics). Optional Google Analytics 4 uses cookies and follows regional privacy controls (prior consent in EEA/UK/CH and conservative prior consent for unknown regions, opt-out elsewhere; remains off if storage is blocked).
Entries and files
Everything you paste or generate is processed in the page. Nothing is uploaded. The name wheel and the team generator store named lists in this browser's local storage only after you press a save button, and Delete removes the selected list again. JSON exports and share links are created locally; they are ordinary files and URLs that you control. The other tools keep their session history in memory only: it disappears when you close or reload the tab. The wheel's Auto-remove and Sound switches are remembered in this browser's local storage (key choicehat:prefs:v1) when you change them. None of this data is sent to the server.
Share links
A share link keeps entries in the URL fragment — the part after #. Browsers do not send fragments to the server, but anyone who has the link can read the entries. The site never puts entries in the query string and never shortens links through a third party. Analytics reporting uses sanitized paths without query strings or fragments.
Optional analytics and cookies
This site may offer optional Google Analytics 4 to understand general traffic trends under regional privacy policies: in regions requiring prior consent (EEA, UK, Switzerland, and conservative jurisdictions) or where visitor region is unknown, measurement only activates if you explicitly choose Allow in the footer settings. In other recognized regions, measurement is enabled by default with opt-out available at any time via the footer settings. If you do not allow it or if your browser sends a Global Privacy Control (GPC) or Do Not Track (DNT) signal, Google analytics remains completely inactive. Choosing not to allow analytics or opting out at any time never restricts access to any tool.
When enabled, Google Analytics uses pseudonymous cookies (such as _ga, expiring in up to 180 days) to distinguish unique visits, and your choice is remembered in localStorage for up to 180 days (or temporary memory if storage is unavailable). Google receives standard connection metadata, including your IP address, browser type, device details, referring domain, and clean page addresses without tool entries or fragments. While advertising features, Google Signals, and ad personalization are disabled with no cross-site identification, network requests naturally touch your IP address and we do not claim complete anonymity. Data may be processed on servers outside your country by Google and its affiliates. Learn how Google uses information from sites at policies.google.com/technologies/partner-sites and see Google's privacy policy at policies.google.com/privacy .
If we enable analytics, we require user and event data retention to be limited to 2 months; aggregate reports may remain longer. You can opt out or withdraw consent at any time via the footer settings; doing so immediately stops data collection and clears Google analytics cookies without removing your saved tool entries.
Hosting metadata
Your entries are never uploaded. The site's static files are served through Cloudflare and this site's own server, and requests for them may appear in their ordinary access logs (for example IP address, user agent and requested path). Log retention follows each provider's usual practice; the site does not use those logs to identify visitors.
Visit statistics
To know how often pages are viewed, this site's own server counts page views in its own statistics database — no cookies, no scripts and no third-party analytics service. For each page view it keeps the time, the page path and language, the country code supplied by Cloudflare, the referring website's host name (not the full address), a coarse browser, operating system and device type, and whether the request came from a known crawler. It does not store your IP address or your full browser identifier (user agent).
To count unique visitors, the server combines the IP address and browser identifier with a random value that is replaced every day and keeps only the resulting irreversible hash, so visits on different days cannot be linked. These records are deleted after 14 days; after that only daily totals are kept. Your entries are never part of these statistics.
Actions you take
When you spin the wheel, flip a coin, roll dice, generate numbers, letters, teams or a shuffled list, or ask yes or no, and when you copy a result or hand a download to the browser, this site records a fixed action name and whether it succeeded. It does not store your lists, questions, ranges, generated values, file names, the page address, or a visitor marker for these actions. Browser Do Not Track and Global Privacy Control skip this count. If the count cannot be saved, the tools still work.
When you email us
If you write to contact@choicehat.com, Cloudflare's email routing receives the message, passes it on to the mailbox our operators read, hosted by Google (Gmail), and also hands a copy to a small program we run on Cloudflare, which keeps it only until our own server has fetched it — normally within minutes and never longer than 14 days. Our server, hosted by Google Cloud in the United States, keeps your email address and name, the subject, the text of the message, the technical headers and the names and sizes of any attachments (not the attachments themselves) in our internal support list for up to 180 days and then deletes them. Cloudflare's delivery log records the sender and recipient addresses, the subject and the result of the delivery for about a month. We use your message only to answer you, keep it only as long as we need it and delete it when you ask us to.
What this site does not do
- No advertising trackers; first-party server statistics run without cookies, and optional Google Analytics follows regional consent and opt-out controls.
- No advertising, no Google Signals, no cross-site profiling, and core tool assets run locally with no remote fonts.
- No AI or file-processing backend.
Deleting your data
Use Delete to remove a stored list; lists you never saved disappear when the tab closes. The Auto-remove and Sound preferences (key choicehat:prefs:v1) are not removed by that button; clear this site's data in your browser settings to remove them as well. In-memory histories disappear when the tab is closed. Withdrawing analytics consent in the footer clears analytics cookies immediately.