Privacy Policy

Last updated October 13, 2026 (Google course lookup added)

Pinpoint Golf is a small personal project: a GPS rangefinder and scorecard for golf. This page explains exactly what it stores about you and why. It doesn't sell your data, show ads, or use tracking or analytics cookies.

What we store

• Your account. Your name, email address, and the username you choose. If you sign up with a password, we store only a salted, one-way hash of it, never the password itself. If you sign in with Google, we store the name and email Google shares and Google's account ID for you. We never see your Google password.
• Your saved rounds. The course, tee, and scores you enter (strokes, putts, fairways, clubs, penalties, and similar stats), plus the date, and a handicap index worked out from them.
• Who you follow, and who follows you, plus any likes and comments you leave on rounds.
• Notifications. A record of follows, likes, comments and shared rounds that involve you, so the app can show them under the bell. If you turn on phone notifications, we also store the address your browser gives us for delivering them to that device. Turning them off, or signing out, deletes it.
• A sign-in session. A random token that keeps you signed in on your device for up to 90 days. Signing out deletes it.
• Password-reset links. If you ask to reset your password, we store a scrambled (hashed) copy of the one-time link we email you, so we can check it when you use it. Each link works once and expires after an hour.

What other people can see

Anyone signed in to Pinpoint Golf can find you by your username, or by your exact email address. Your email address itself is never shown to anyone. They can see your name, your username, and how many followers you have and how many people you follow.

Your rounds and handicap index are visible only to you and to people who follow you. Accounts are private by default: you approve each follower. You can make your account public in Settings, so anyone can follow you without approval. Anyone who opens your invite link follows you straight away, so only share it with people you want following you. You can make a new link at any time, and the old one then stops working. Each round can be hidden from followers with its “Share with followers” switch. Likes and comments on a round are visible to everyone who can see that round, and you can delete your own comments and any comment on your rounds. You can remove a follower at any time.

Your location

The app uses your phone's GPS to show distances to the green and to list the golf courses near you. Your exact location stays on your device and is never stored on our servers. To find nearby courses, the app sends only your approximate area (rounded to a square about 5 km / 3 miles across) to our server, which looks up courses in that area and doesn't link it to your account. You can deny location access and still search for courses by name and use the scorecard.

What's stored on your device

Your sign-in token and the round you're currently playing are kept in your browser's local storage, so a round survives a reload or poor signal. Each account's in-progress round is kept separately, so people sharing a phone don't see each other's round.

Services we rely on

• Cloudflare hosts the app and its database.
• Google provides the map (Google Maps) and, if you choose it, Google sign-in. Google receives the standard request information any website visit sends (such as your IP address) and the map area being shown. When a course's listing has no map coordinates, Google also receives the course's name and address to find it on the map.
• GolfCourseAPI receives the course names you search for.
• Your phone's push service (Apple, Google, Mozilla or Microsoft, depending on your device) delivers phone notifications if you turn them on. Each message is encrypted so that only your device can read it.
• Resend delivers password-reset emails. It receives only your name, your email address, and the reset link, and only when you ask for a reset.
• OpenStreetMap services (Nominatim and Overpass) receive a course's address or location to look up its hole layout, and the approximate area described above to find nearby courses. They don't receive your exact location or any information about you.

Your account and scorecards aren't shared with any of these services beyond what's described above.

Deleting your data

To delete your account and every round saved to it, email [email protected] from the address on your account and it will be removed. Signing out clears your sign-in token from the device.

Changes

If this policy changes, the date at the top will change with it.

Contact

Questions: [email protected]