Privacy Policy
Last updated: October 16, 2026
Strokes Golf (“Strokes Golf,” “we,” or “us”) provides a golf scorecard and round-sharing service. This policy explains what information we handle, how we use it, and the choices available to you. It applies to the Strokes Golf website and iOS app in the United States.
Information we handle
- Account and sign-in information: email address for email sign-in, account identifiers, and information provided by a sign-in provider when you choose Google sign-in. Supabase Auth processes sign-in credentials and sends account-verification and password-reset messages; Strokes Golf does not store your password in its app tables.
- Profile information: display name, username, default handicap, and optional city and state.
- Round information: course, players, handicaps, scores, putts, game formats, team assignments, stakes if entered, invite and participation identifiers, and completed-round history.
- Friend information: friend requests, accepted connections, and information needed to find and display profiles and friend-round history.
- Course information: course names, locations, pars, hole handicaps, and course details you save or import.
- Device and service information: the app stores an authentication session and limited round-resume or sign-up flow information in local browser/app storage. Our hosting and service providers may process technical request information, such as IP address, browser/device details, and service logs.
Strokes Golf does not request precise device GPS location. The app code does not currently include in-app advertising or analytics SDKs.
How we use information
- To create and secure accounts, authenticate users, and support password recovery.
- To create and run golf rounds, synchronize scores, calculate leaderboards, and provide round history.
- To support profile discovery, friend connections, and sharing of eligible completed rounds with accepted friends.
- To search for and import golf-course information, maintain a shared course library, and control course API usage.
- To respond to feedback and support requests and to maintain and protect the service.
Information visible to other users
People in a live round can see the round roster, player names and handicaps, scores, and round settings needed to play. A person with a valid invite can join a round while its invite is open. Signed-in users can search for profiles by username or name; profile details provided for discovery may include display name, username, city, and state. Accepted friends can see profile details and completed-round results made available through the app. Course entries are shared with signed-in users.
Service providers and sharing
We use service providers to operate Strokes Golf:
- Supabase provides authentication, database, realtime synchronization, and server-side functions.
- Vercel hosts the static web app.
- Google provides the Google sign-in option. If you use it, Google processes your sign-in and returns information permitted by your Google settings.
- GolfCourseAPI provides course search and details. When you request a course search or import, our server-side function sends the search phrase or course identifier to that provider. The app does not send your account email or access token to GolfCourseAPI.
- jsDelivr delivers the Supabase client library used by the web app. Google and Apple deliver web sign-in libraries; those script requests may expose technical connection information to the providers. Google sign-in is available. Apple sign-in code is present but the Apple sign-in option is currently disabled.
We do not sell personal information or use it for cross-context behavioral advertising. We may disclose information when required by law, to protect users or the service, or as part of a business transfer, subject to applicable law.
Feedback and support
If you use the in-app feedback feature, it opens your email app with a draft addressed to strokesadmin@gmail.com. The draft may include your email address and current round code to help explain a report. The app does not send or store that message; it is sent only if you choose to send it from your email app. Your email provider will handle it, and we will receive it at that address.
Retention and account deletion
We keep account and profile information while the account is active and retain round and course information to provide the service and its history. You can request account deletion from Manage Profile. When deletion completes, we delete the account, profile, and friendships; delete active rounds you hosted; remove your player and scores from other active rounds; and remove your identity, participation, and scoreline from completed rounds. Completed rounds and other players’ results remain. Courses you contributed remain in the shared library without an owner. We do not keep an app-managed temporary copy or deletion queue.
Deletion is subject to successful completion of the account-deletion process. Service providers may retain information in provider-managed backups or security/operational logs according to their own retention practices. We do not control those provider retention periods.
Your choices and privacy requests
You can edit profile details in Manage Profile, remove friend connections in the app, and request account deletion there. For questions or privacy requests, contact strokesadmin@gmail.com. Depending on applicable state law, you may have additional rights regarding personal information; contact us and we will respond as required by law.
Children
Strokes Golf is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can review and take appropriate action.
Security
We use access controls and service-provider security features to protect information. No online service can guarantee absolute security.
Changes to this policy
We may update this policy as the app changes or as required by law. We will update the date above when we publish a revised policy.
Questions? Email strokesadmin@gmail.com.