Keep classroom choices close to the browser.
This page explains what Random Interaction Tools does today and what would need to change before advertising is enabled. It is written for teachers and facilitators, not as a promise of legal compliance in every jurisdiction.
What stays on your device
Entries, Setups, and Winners are processed in your browser. Saved Setups use browser local storage (localStorage) on this device and are not an account or cloud backup. Clear your browser storage to remove them. Do not put sensitive student information into an Entry.
A Shared Setup encodes the Setup in the URL fragment after #. Fragments are read by browser code and are not sent as the path, query string, or request to the server. Anyone you give that link can read its contents.
Hosting, measurements, and retention
Pages are hosted on Cloudflare. Cloudflare may process ordinary request data needed to deliver and protect the site. When enabled,Cloudflare Web Analytics provides aggregate page and performance measurements without cookies. Cloudflare says its dashboard exposes six months of data and keeps unsampled beacon data for seven days before aggregation. This does not claim that every network signal is impossible for a hosting provider to observe.
When Analytics Engine is enabled, a same-origin endpoint records a fixed set of aggregate product events. It rejects Entry text, Winner labels, Setup URLs, exact viewport sizes, identifiers, and unknown fields. Product-event measurement stops after Presentation Mode is entered and resumes only with the exit event. Accepted aggregate events are retained for up to three months.
Advertising controls
Live advertising is disabled for this build. An inert, labelled ad space is not an ad request. Before Google AdSense can be enabled, the operator must complete the approval, audience, age-restricted treatment, category-control, privacy, ads.txt, owner, and consent reviews described below.
In the EEA, UK, or Switzerland, activation requires a Google-certified consent management platform integrated with the IAB Transparency and Consent Framework. Where Purpose 1 consent for device storage is absent, the Google ad tag is not called. You can decline non-essential consent through that platform when it is active.
Purposes, vendors, and international processing
We use browser storage to restore your Setup, Cloudflare to host and protect pages, and optional aggregate measurement to understand reliability and feature use. Providers may process data outside your country under their terms and transfer mechanisms. We do not sell Entry lists or build profiles of students.
Your choices and questions
You can avoid saving a Setup, clear localStorage, decline future non-essential consent, and stop using the site. There is no sign-in or contact form operated by this release. For a privacy or child-status question, contact the project owner using the published contact details on the owner's GitHub profile; do not include student names or shared-link contents. See our Terms and randomness explanation.
Vendor behavior and policies can change. These operational descriptions were last checked against provider documentation on 24 August 2026 and must be reviewed again before analytics or advertising activation.