Privacy Policy

Players: Guest mode requires no account and no personal information. If you create a player account, we collect your display name, email address, and round history.

Course operators: We collect your business contact info, course branding assets, and subscription and billing details processed securely through Stripe.

Technical data: We automatically collect IP address, browser type, device type, and session cookies when you use the platform.

To run the platform — scorecards, leaderboards, dashboards, and tournaments. To send account and billing emails. To improve the product. To prevent fraud and comply with the law.

We share data only with the services that run the platform:

• Stripe — payment processing for operator subscriptions
• Supabase — our database and hosting infrastructure

Course operators also receive gameplay data — display names, scores, round histories, and leaderboard standings — for players who access the platform through their course. This is how operator dashboards work.

We do not sell personal data. Ever.

Player display names and scores on a course leaderboard are publicly visible to anyone with the leaderboard URL. Use any display name you're comfortable with.

Under 13: Guest mode only. No account registration or email collection is permitted.

Ages 13–17: Account registration requires verified parental or guardian consent. We'll email a parent or guardian at the address provided during signup, and the account won't activate until they confirm.

All users under 18: Your full name, email, and gameplay history are never shared with or visible to course operators. You may appear on public leaderboards using an anonymized display tag only.

On certain operator-configured tiers, the platform may display third-party advertisements. We do not permit advertisers to target individual users based on personal information, and we do not sell user data to advertisers.

You can request access to, correction of, or deletion of your account and personal data at any time by emailing support@caddycard.net. We'll respond within 45 days. Account data is retained for two years after closure, then deleted or anonymized.

All Customer and Player data is stored exclusively on servers within the United States. Gameplay records may be retained indefinitely in anonymized or aggregated form as part of the platform's historical record.

We use encryption at rest and in transit, row-level database security, and continuous automated monitoring to protect your data. If a breach occurs that may affect your personal data, we'll notify you within 72 hours of discovery.

We'll give at least 30 days' notice of any material changes by email and by posting the updated policy here.

CaddyCard, LLC | 3776 Orion Lane, Mount Pleasant, SC 29466
support@caddycard.net