🔒 Privacy by Design

Privacy Policy

Last updated: September 15, 2026. We believe recreational web tools should respect your privacy by default, requiring no accounts, no trackers, and no personal data collection.

🚫

No Accounts

You never need to register, log in, or provide an email address to use the Magic 8 Ball.

📱

Local Processing

Device tilt and shake detection run entirely on your device and are never sent to our servers.

🛡️

Zero Data Selling

We do not sell, rent, monetize, or harvest user questions or fortune histories for third parties.

01. Introduction & Philosophy

Welcome to The Magic 8 Ball ("we," "our," or "the Service"), accessible at themagic8-ball.com. We are dedicated to providing a faithful digital rendition of the classic fortune-telling novelty toy while adhering to strict privacy-by-design principles.

This Privacy Policy explains how our website operates, what minimal technical data is handled when you access our services, and your rights regarding digital privacy.

02. Information We Collect (and Don't Collect)

✓ Information Stored Locally on Your Device

We use browser-native storage mechanisms (HTML5 localStorage and sessionStorage) exclusively to enhance your experience across visits:

  • Your color scheme preference (dark/light theme).
  • Your sound and haptic preference toggles (audio on/off).
  • Your selected ball skin or theme preferences.
  • Your recent fortune history (so you can review answers you previously received).
  • Temporary banner dismiss states.

Note: This data remains isolated within your browser's private sandbox and is never transmitted to our remote servers.

✕ Information We Never Collect

  • Personal identification details (names, home addresses, phone numbers).
  • Payment card or billing credentials (our platform is 100% free).
  • Cross-site tracking cookies or advertising tracking beacons.
  • Biometric, facial, or ambient background voice recordings.

03. Device Sensors & Accelerometer

On mobile and tablet devices, our application supports physical shake detection using the W3C DeviceMotionEvent and DeviceOrientationEvent APIs.

When granted permission by your browser (e.g. iOS Safari motion prompt), acceleration and tilt vector numbers are calculated strictly in-memory by JavaScript running on your CPU. This sensory feedback is immediately discarded once the shake threshold triggers the fortune reveal. At no time are motion vectors recorded, uploaded, or stored on external servers.

04. Microphone & Speech Recognition

Where voice transcription features are made available, speech recognition is executed via your operating system's native browser SpeechRecognition API (e.g. Apple Siri speech synthesis engine or Google Web Speech API).

We do not capture, record, or archive any audio stream files on our servers. Processing complies strictly with your browser vendor's native platform privacy protections.

05. Cookies & Local Storage

We do not use invasive third-party tracking cookies or digital advertising identifiers. We strictly limit web storage to necessary functional tokens for caching UI preferences.

You have full autonomy to clear your browser cache, cookies, and local storage at any time via your browser settings, which instantly purges all client-side records.

06. Edge Network & Server Logs

Our website is served globally via Cloudflare edge infrastructure. When you request a web page, Cloudflare automatically processes standard transient HTTP connection headers (such as IP address, User-Agent, and requested URI) to securely route packets, prevent Distributed Denial of Service (DDoS) attacks, and maintain web application firewall (WAF) integrity.

These server logs are maintained strictly for network security and operational telemetry, and are never correlated with personal identities.

07. Children's Privacy (COPPA)

Online Magic 8 Ball is designed as a family-friendly recreational toy. We do not knowingly solicit, collect, or store personal information from children under the age of 13 in compliance with the Children's Online Privacy Protection Act (COPPA) and international child privacy directives.

08. Your Rights Under GDPR & CCPA

Under global data protection laws (including the European General Data Protection Regulation and California Consumer Privacy Act), users enjoy rights regarding personal information. Because we do not harvest or maintain personal user records, there is no remote database to access, modify, or erase.

To erase your client-side question records, you can click "Clear History" inside the application or clear your browser's site data at any time.

📫 Privacy Questions & Inquiries

If you have any questions, suggestions, or concerns regarding our privacy policies or data practices, please reach out to our team.