Plain-English privacy

Signing in with Apple, Google, or email gives us your name and email address — nothing more is requested. If you use Apple's Hide My Email, we only ever see the relay address. Account data is stored with Supabase, our authentication and database provider. Passwords (for email accounts) are hashed by Supabase; we never see them.

Public: the reviews and photos you post appear on course pages under the display name you choose — and if you fill in the optional location on your profile ("Holliston, MA"), that shows beside your reviews too. Leave it blank and nothing appears. The rating and the note you attach to a round you log are the same thing as a review: you have one rating per course, it appears on that course page under your display name, and it counts in the course average. Log a round without a rating and nothing is published. Private to your account: your Tee Sheet (courses you want to play), your collections, the Your Map view built from them, and the rest of every round you log — the date you played, the course's coordinates, and whether you logged it on the web or in the app. Nobody else can see any of that — the database only ever returns those rows to you. All of it lives in Supabase, belongs to you, and goes when you delete your account.

Our course data has gaps, and signed-in golfers can fill two of them: the hole count and whether a course is public or private. You can propose a value, or agree with one someone else proposed. The suggestion itself is public — it appears on the course page labelled "reported by golfers, not yet verified" — because that is the whole point of it. Who proposed it, and who agreed, is never public. The database won't hand out the proposer's identity to anyone, and your agreements are readable only by you.

Two different things, so here is both. Finding courses near you: when you allow location access, the distance sorting happens entirely on your device — your coordinates are compared against course data already on the device, and they are never sent to us or stored anywhere. If you type a town or ZIP instead, that typed text (not your location) goes to OpenStreetMap's Nominatim service to find the place. Marking and logging courses: when you add a course to your Tee Sheet or log a round, we save that course's coordinates with the entry — the golf course's location, never your own — so Your Map can draw a pin for it. That is linked to your account, private to you, and deleted with your account. Location permission is optional; everything works without it.

Both the website and the app send usage measurements to Google Analytics 4 — the website through Google's standard tag with IP anonymization, the app through Google's Measurement Protocol, because the standard tag cannot run inside an app. Either way it is the same short list: which screens you view and which features you use — a course added to a Tee Sheet, a round logged, a share started, a fact proposed — as counts and course ids. Every measurement is labelled app or web so we can tell the two apart. It never receives your name, your email, or your account id, and nothing you typed: a note or review is recorded only as yes, there was one. The app sets no cookies — it can't, and it doesn't need to; it uses a random number stored on your device that identifies the install and nothing about you. There are no ads anywhere, no advertising SDKs, and we never sell or share your data with advertisers or data brokers.

Three other services receive ordinary web requests, and nothing about your account: Cloudflare Turnstile, which guards the sign-up, password and feedback forms on the site and in the app; OpenFreeMap/OpenStreetMap, which serve the map tiles; and the jsDelivr CDN, which serves the Supabase library the account pages load.

Open Account → Settings → Delete account — in the app or on the site — and it goes: your account and sign-in, your profile, your Tee Sheet, every round you logged, your collections, your reviews, and your photos (the image files as well as the records). Permanently, with no copy kept — with two deliberate exceptions, below.

Two things deliberately survive, with your name taken off them. Problem reports you sent through the feedback form stay as anonymous site-maintenance notes — they are messages to us about a page, not content of yours. And a course fact you proposed under Local knowledge stays on the course page, no longer linked to you, because other golfers may have vouched for it and removing it would take away something they agreed to. Your own agreements with other people's suggestions are deleted. Prefer email? Write to sitesbybob@gmail.com from your account address and we'll do it for you.

Anything unclear, or a request we haven't covered: sitesbybob@gmail.com. Par 5 is an independent site; course data comes from OpenStreetMap and the sources credited on our data page.