Privacy policy

Who we are

opnTee is a place for a golf group to post tee times, claim a spot, chat, and keep a scorecard. The operator of opntee.com is the data controller. Contact rmbuckleyiii@gmail.com.

Account

When you create an account we store:

• Your email address.
• A password hash. We do not store the password itself.
• The name you enter.
• The date the account was created.

Profile

Optional details you can add or remove from Profile:

• A profile photo. The file is stored in our database (JPEG, PNG, or WebP, up to 512 KB), not on a separate photo host.

Other data

These sit on the account or on a round, and they are the fields declared as Other Data in the App Store privacy label:

• A Venmo username, so someone on a tee time with you can settle a bet, and whether you chose to show that username to friends. We never see a card number, a bank account, or a Venmo password.
• A GHIN number, stored so your group can look you up. opnTee is not connected to GHIN or the USGA and does not post scores there.
• A Handicap Index, which you type in or which opnTee calculates from rounds you log.
• Handicap history. Each round you log stores the course, the tee, the date, how many holes you played, the score, the score differential, and the course rating, slope, and par used to calculate it.
• A friend-link code, so someone can add you without searching by name.
• Optional stakes on a scorecard (the match, the front nine, and the back nine) and league payments the group records: who paid whom, the amount, and an optional note.
• Names and handicap indexes of guests you type onto a card.

Golf and messages

Using the app creates:

• Groups you create or join, and events, tee times, and claims.
• Hole-by-hole scores on a shared card, and contest distances such as closest to the pin or longest drive.
• Chat messages in a group, a round, or an event, and round summaries you post to a group or to friends.
• Friend links and invitations you send or accept.
• Reports you file (who reported it, who wrote it, a short excerpt, and an optional note) and the players you block.

A course name you search may be sent to OpenGolfAPI to look up public course facts. That request does not include your account, and we do not keep a history of searches.

Notifications and email

If you turn notifications on, we store:

• Your email address, used to send mail through Resend (password reset, the notices you have not turned off, and a content report sent to support).
• Web push subscriptions: the browser endpoint and its encryption keys.
• On the iOS app, the Apple Push Notification device token, so we can ping that phone through Apple Push Notification service. The app registers that token and refreshes it when you open the app with notifications allowed.
• Which kinds of notice you have turned off, and a token used only to turn a kind of mail off from a link.
• In-app notices when someone sends or accepts a friend request, and likes on round summaries.

Mail is transactional. We do not send marketing. If the Resend key is not configured, the server logs the message instead of sending it. That is for local development, not production.

Cookies and sessions

A signed-in browser or the iOS app holds an httpOnly session cookie named opntee_session. It lasts 60 days and is how we know it is you. A short-lived cookie named opntee_push_prompt remembers that the iOS app may ask about notifications after you claim a spot or post a tee time. We do not use advertising cookies.

What we do not collect

opnTee does not use an analytics product, an advertising SDK, or the Identifier for Advertisers. We do not read your location, your contacts, HealthKit, or photos beyond the profile picture you choose. We do not sell personal information and we do not track you across other companies' apps or websites.

The host (Vercel) and the database may keep short-lived request logs, such as an IP address and a user agent, for security and operations. Those logs are not used to build a profile or to advertise.

Who processes it

• Our database, which holds the account and the rounds.
• Vercel, which hosts opntee.com.
• Resend, which delivers email to the address on the account.
• Apple, when the iOS app is registered for push and we send a notification.
• Your browser's push service, when you subscribe to web push.
• OpenGolfAPI, only for the course-name lookup described above.

How long we keep it

Account data, scores, messages, and notification tokens stay until you delete them or delete the account. A password-reset link expires on its own. Request logs kept by the host follow the host's retention, which is operational and short.

Deleting your account

Profile includes Delete account. You confirm by typing DELETE or by re-entering your password, and then you are signed out.

We then:

• Replace your name with Deleted player and replace your email with an address that cannot receive mail, so the original email can be used again.
• Discard the password, GHIN number, Handicap Index, handicap history, Venmo username and the share-with-friends setting, friend link, and profile photo.
• Delete sessions, web push subscriptions, iOS device tokens, notification preferences, and unsent notifications.
• Delete friend links, invitations, group memberships, the chat messages you wrote, the round summaries you posted, the players you blocked, and the reports you filed.
• Keep hole scores on a shared card, shown as Deleted player, so the rest of the group still has a card that adds up.
• Hand a group or event that still has other people to one of them. A group with only you is closed. A course you added stays in the directory without your name on it.

A new account with the same email does not pick up the old scores. See the terms and support.

Children

opnTee is not directed at children under 13, and we do not knowingly collect their personal information.