Privacy Policy

Information We Collect

When you use Lazy Golfing, we collect information you provide directly:

• Account information (name, email, profile photo) via Google Sign-In
• Golf round data you choose to log (scores, courses, dates, statistics, private notes, and optional Shared recaps)
• League and group activity (membership, events, standings)
• Mini-golf rounds, connected participants, sharing choices, competitions, challenges, achievements, venue reviews, moderated photos, operator requests, and reports that you choose to create
• Profile preferences and settings
• Feedback you submit, optional contact details, your account association when signed in, the page path and app version, and coarse technical details only when you choose to include them with a bug report
• Your account agreement record: the Terms, Privacy Policy, and agreement-screen versions you accepted, that you confirmed you are 18 or older, the app version that showed the screen, and when. We do not ask for or store your birth date. This record is kept as evidence of the agreement after account deletion, without your name or account link
• Billing and agreement records when paid features are used, including subscription/service status, offer and agreement versions, acceptance timestamps, league association, invoice and provider references, amounts, currency, billing dates, refunds, disputes, and bounded audit receipts
• Optional service inquiry and engagement information, including contact and league context, requested scope, signed Statement of Work, delivery/acceptance state, support end, refund allocation, and source-file deletion status
• Device and usage information (browser type, pages visited, performance, and errors) for analytics when analytics is configured
• Local device storage used for offline score entry, sync queues, theme settings, and app preferences
• Shared recap reports submitted by signed-in viewers, including the selected reason and optional details
• For Match Play tournaments, bracket assignments, seed rank, confirmed winner, played hole margin or concession/walkover status, result version, and advancement state. This follows the tournament's visibility and manager permissions.
• For Four-Ball tournaments, the side name and partner assignments, both submitted round references, and the server-derived lower gross or net score for each hole. Side membership follows the tournament's visibility.
• For Foursomes tournaments, the side name and partner assignments, ordered tournament-member identifiers for each alternating stroke, hole par and gross score, source and rules fingerprints, correction version, and derived side total. These records follow the tournament's visibility. Account deletion removes Foursomes scorecards involving that account before membership identifiers are deleted.
• For Scramble tournaments, the side name and two-to-four-player roster, ordered tournament-member identifier for every selected counted stroke, hole par and gross score, source and rules fingerprints, correction version, and derived side total. These records follow tournament visibility. Account deletion removes Scramble scorecards involving that account before membership identifiers are deleted.
• For supported tournament rounds, reviewed start groups, participant membership or side references, planned tee time, planned starting hole, assignment version, and bounded correction/clear receipts. Exact before/after participant snapshots are private operational provenance and are retired when an affected account is deleted. Planned starts follow tournament visibility and do not establish attendance or an actual start.
• A minimal audit receipt when an authorized tournament viewer deliberately requests a local results CSV or opens print options; generated report files and standings contents are not stored in that receipt

Lazy Golfing accounts are for people at least 18 years old. The Service is not directed to anyone under 18, and we do not knowingly collect personal information from anyone under 18. If we learn that an account belongs to someone under 18, we close it and delete its personal information except records the law requires us to keep. League managers and service customers must not submit unnecessary information about minors and must have any legally required parent/guardian, organization, privacy, and publicity permission. Contact us if you believe a child's information was submitted without proper authorization so we can investigate and take appropriate action.

Live Location and Private Search Area

Lazy Golfing requests live browser location only after you choose a purpose-labeled action such as Use my location once. That one-use fix stays in browser memory for the current interaction and is not saved to your account merely because the browser granted permission.

You may separately save a private account Search areafor course discovery and distance ranking across signed-in devices. We store one approximate city, ZIP, course, named-area, or deliberately coarse-grid centroid, its label, radius, source/precision class, and consent time. We do not store device accuracy, altitude, heading, speed, repeated fixes, routes, trails, or a home-address inference.

The Search area remains until you clear it or delete your account and is included in your private account JSON export. Its exact coordinates and label are excluded from public profiles, partner payloads, public shares and exports, notifications, and analytics. A guest device area expires after 30 days and is never silently attached to a later account.

How We Use Your Information

• To provide and improve our golf tracking services
• To calculate statistics and LazyCap estimates
• To enable social features like leagues, groups, and playing partners
• To process payments and manage subscriptions via Stripe
• To show active league members an optional external document-folder link chosen by their league managers; Lazy Golfing does not upload or host the linked documents
• To send transactional emails (receipts, trial reminders, payment notifications)
• To communicate service updates and new features

Round Sharing & Shared Recaps

Each round has an audience of Private, Friends Only, or Public. Friends Only rounds are available to accepted friends. Public rounds may be viewed without signing in. Eligible tagged or confirmed playing partners may view the specific round they played in even when its audience is Private. Blocking takes priority over friend and playing-partner access.

When an administrator helps enter a complete scorecard, the round starts Private and remains owned by you. The round shows that it was entered by an administrator, you receive an in-app notification, and you may review, edit, change its audience, or delete it. Other viewers do not receive the administrator's identity or internal support reason.

Private notes (including equipment context you choose to record there), personal labels, and other owner-only fields stay private. A Shared recap is a separate optional field that follows the round's effective audience. When matching rounds are merged, each golfer keeps ownership of their own scorecard, recap, notes, settings, and history; merging does not copy or overwrite them.

Your reusable My Equipment list is also owner-only. It may include a category, label, brand, model, and details you choose to save. It is included in your portable account JSON, removed with your account, and is never added to shared rounds or used to make fitting or purchase recommendations.

Signed-in non-owners can report a visible Shared recap. Reports are limited to authorized viewers and are reviewed by admins. We may hide a recap from viewers without deleting the underlying round or its audit history.

A saved round may have a readable permanent link based on its course and calendar date. Copying that link does not make the round public or change who can view it: Lazy Golfing still applies the owner's current audience, friendship, participant, blocking, deletion, and account-safety rules. Round permalink pages are excluded from search indexing in this release.

Mini-Golf Sharing & Venue Content

Mini-golf rounds are Private by default. Owners may choose Friends or Public visibility and choose whether to share results or the full scorecard. Private share links expire, are removed from the address bar after opening, and can be revoked at any time. Lazy Golfing stores a protected reference to each link, not the usable secret contained in it.

Signed-in rounds save to your account. Your browser may keep an offline copy and changes waiting to save so scoring can recover after a connection interruption. If offline storage is unavailable, online changes still save to your account, but the app will not accept changes while offline. Guest rounds stay on that device and are never added to an account unless you choose each scorecard to import. Venue favorites and want-to-play choices are private account data. Nearby-search coordinates are used for that search only and are not retained as a location trail.

Participant accounts are linked only by the round owner to the owner's own account or an accepted friend. A linked participant may see the exact round but cannot impersonate the owner. A private expiring scoring link can change only its named player's scores; it cannot manage players or complete the round. Direct challenges require recipient acceptance before result entry. Competition and challenge results require a connected participant account and compare rounds with the same number of holes.

Venue reviews require a completed account round at that venue. Photos require confirmation that you have permission to share them and must include alt text. The browser compresses photos, removes camera metadata, and checks for duplicate submissions. Photos are limited by type and size, remain hidden until approved, and are removed when deleted. Operator requests use a verified email, public role statement, and official website (not identity documents) and require administrator approval. Approved operators can post a public venue response but cannot access player history. Reviews, photos, and shares can be reported and hidden. Account exports include your mini-golf data, and account deletion removes that data and your mini-golf photos.

Data Collection Transparency

Payment & Financial Data

All payments are processed by Stripe (opens in new tab), a PCI-DSS Level 1 certified payment provider. We do not receive or store full card numbers or card verification codes. Stripe handles payment-method details and can retain a payment method when you authorize it under its checkout or invoice controls.

Lazy Golfing stores or receives the minimum provider and local records needed to operate and reconcile billing, such as Stripe customer, Checkout Session, subscription, invoice, payment, and refund references; offer and league associations; amounts, currency, status, dates, and bounded billing history. We do not put roster/source files, credentials, private service notes, or sensitive payment information in Stripe metadata.

If a payment is disputed, we share with Stripe and the card issuer the records needed to respond, such as account and plan details, the terms you accepted and when, use of paid features, and our communications with you. We may also report a disputed charge to Stripe's fraud-prevention tools, which can decline future payments from the same payment method or email address. Stripe keeps that information under its own privacy policy; Lazy Golfing does not collect device, IP-address, or card data for this purpose.

Optional Professional Services

Commissioner Launch, Migration, and custom engagements require a signed Statement of Work before invoicing. We use inquiry, scope, agreement, payment, delivery, acceptance, support, and deletion records to evaluate fit and perform the accepted work. We request only the source data needed for the written scope.

Do not send rosters, spreadsheets, credentials, payment details, or other source files through ordinary email. If files are needed, the Statement of Work identifies an approved private intake location, access owner, permitted data, and deletion deadline. Project documentation, source control, public issue trackers, and ordinary chat are not customer-file repositories.

Data Storage & Security

Data is primarily processed in the United States. We use administrative, technical, and organizational safeguards designed to protect information, including access controls, transport encryption, provider safeguards, backups, monitoring, and recovery practices appropriate to the Service. No Internet service, storage system, or security control is perfectly secure, and we cannot promise that unauthorized access, loss, or an incident will never occur.

We investigate suspected security incidents and provide notices to affected people, customers, providers, insurers, regulators, or others when applicable law or contract requires it. Do not send credentials, payment details, or sensitive source files in an incident report.

Third-Party Services

We share data with the following third-party services only as necessary to operate the platform:

• Google: OAuth authentication (name, email, avatar)
• Stripe: Payment processing (subscription management)
• Resend: Transactional email delivery
• Cloudflare: Hosting, CDN, and security
• Google Analytics: Optional usage analytics when configured
• Cloudflare Web Analytics: Optional privacy-focused page analytics when configured

Providers process information under their own terms and our applicable arrangements. We limit sharing to the functions we use, but providers can process security, fraud, billing, support, and legally required records under their policies and law.

We do not sell, rent, or trade your personal information to third parties.

Cookies & Tracking

We use cookies and local browser storage to keep you signed in, protect requests from forgery, remember preferences, support offline score entry, and measure whether the service is working. We do not use cookies for behavioral advertising or cross-site ad tracking.

After the server confirms your sign-in, your browser keeps a small copy of your account identity (account ID, name, email, avatar and scoring preferences) for up to 7 days. If you reopen the app without a connection, it uses that copy to keep saving rounds and scores to your account's offline queue; those changes are sent only after the server verifies your session again. It is not a password or sign-in token, and it is removed when you sign out, when the server reports you are signed out, or when another account signs in on the device.

Your Rights

You have the right to:

• Access your personal data at any time via your profile
• Export your personal data as JSON, your golf round history as CSV or XLSX, and a personal statistics report as PDF. Authorized tournament viewers can also create local results CSV or print/PDF copies. Report files are created on your device and are not retained by Lazy Golfing as report files. Year in Review images are also generated locally after your explicit action and may contain your name, selected scores, and a course name; review them before sharing. Lazy Golfing does not retain those images or write an action receipt. A minimal 90-day audit receipt records only a deliberate tournament-results artifact action
• Correct any inaccurate personal information via your profile settings
• Delete your account and account-controlled personal data, subject to independent records owned by other users and minimum billing, tax, contract, fraud, security, dispute, and legal records that must or may lawfully be retained. Retained records are restricted, minimized, deleted, or anonymized when their approved purpose ends. Deletion also removes your round photos and the scorecard images you uploaded. Copies in backups expire on the schedule shown under Backup copies above
• Opt out of non-essential communications

Account or league deletion does not itself cancel an external recurring subscription. Active billing must first be cancelled or transferred through the approved process so customers are not charged after local ownership records disappear.

We do not sell or share personal information for cross-context behavioral advertising. You may still contact us to ask about data practices or rights that apply in your jurisdiction.

International Users

Lazy Golfing is operated from and primarily processes data in the United States. Access from another country can result in transfer to and processing in the United States and by the providers listed above. Mere access does not waive privacy, consumer, or other rights that cannot lawfully be waived. Paid launch geography and any required international transfer mechanism will be approved before paid products are offered in a jurisdiction.

Contact Us

For privacy-related questions, contact us at info@lazygolfing.com. Use the same address to report suspected unauthorized child data, an accessibility/privacy issue, or a security concern; do not include passwords, payment details, roster files, or other sensitive attachments.

See also our Terms of Service, Professional Services Terms, and the Legal Center.