StickScout — Privacy Policy

Effective date: [EFFECTIVE DATE] · Last updated: [EFFECTIVE DATE]

This Privacy Policy explains what personal data StickScout ("StickScout," the "App," "we," "us," or "our") collects, why we collect it, who we share it with, and the choices and rights you have. It applies to the StickScout web app, iOS app, and Android app.

StickScout is provided by StickScout LLC ("StickScout LLC"), a company operated by its founder, Chris.

Controller / operator: StickScout LLC — [mailing address TBD on LLC formation]
Contact for privacy requests: support@stickscout.com

StickScout helps golfers plan tee times around daylight, pace of play, frost and morning conditions, and nearby-course maintenance status. To do that, the App needs to know where you are or where you plan to play. This policy is written to be specific about how that location data is used, because location is the most sensitive data the App handles.

1. Summary (the short version)

• The App uses your location (GPS or a place you type in) to compute daylight, pacing, frost risk, and nearby courses. This is the core function of the App.
• To do that, your coordinates are sent to third-party services — weather, mapping/geocoding, radar, and course-data providers. We name each of them below.
• We do not ask for your name, email, phone number, or an account to use the core App.
• If you submit a crowd condition report, we store the report with a random per-device identifier (not your name). That identifier is pseudonymous personal data, and the rights described below apply to it.
• We do not sell your personal information and do not use it for cross-context behavioral advertising.
• The App is not directed to children under 13 (or under 16 where a higher age applies).

2. Data we collect

2.1 Location data (precise and/or coarse)

• How: Through your device's location services (browser Geolocation API on the web; Apple Core Location on iOS; the equivalent platform location service on Android), or by you typing a place, city, or course name into the App.
• What: Latitude/longitude coordinates. Depending on your device settings and how you use the App, this may be precise (GPS-level) or coarse (approximate). On the web you can request high-accuracy positioning; on mobile you control precise vs. approximate location through the operating system's permission controls.
• Why: To compute sunrise/sunset/twilight times, tee-time pacing, frost and morning-condition risk, and to find and rank nearby golf courses and practice facilities.

2.2 Data you submit (crowd condition reports)

When you report a course's condition (for example, "aerating," "recovering," "overseeding," "closed," or "normal"), we store:

• the course name and its approximate coordinates,
• the status you selected,
• an optional free-text note you write, and
• a random device identifier (see 2.3).

Do not put personal information about yourself or others into the free-text note. See the Terms of Service for rules on user-submitted content.

2.3 Device identifier and local settings

• The App generates a random device identifier (a value like dev_xxxxx) the first time you submit a report, and stores it in your browser's localStorage (web) or the equivalent local storage on mobile. It is not linked to your name, email, or an account, but because it is a persistent unique identifier that we store alongside your reports and coordinates, we treat it as pseudonymous personal data subject to the rights in Section 8.
• We also store simple preferences locally, such as your units choice (metric/imperial). These stay on your device.
• We use localStorage, not tracking cookies, for the App's own storage. We do not set advertising or cross-site tracking cookies. Embedded third-party content (see 4.2, the Windy radar) may set its own cookies or storage, governed by that third party's policy.

2.4 Technical data

When your device contacts our services or the third-party services listed below, those services necessarily receive your device's IP address and standard request metadata (for example, user-agent and timestamps), as happens with any internet request. We use this only to deliver and secure the service, not to build advertising profiles.

2.5 What we do NOT collect

• We do not require or collect your name, email address, phone number, or a password for core use.
• We do not collect payment card details directly; if and when paid subscriptions are offered, payments are handled by the applicable app-store or payment processor (see Section 6).
• We do not knowingly collect data from children (see Section 9).

3. Purposes and legal bases

For users in the European Economic Area, the United Kingdom, and other regions with similar laws, our legal bases under the GDPR are:

Where we rely on consent, you may withdraw it at any time by turning off location access in your browser or device settings, or by not submitting reports. Where we rely on legitimate interests, you may object as described in Section 8.

4. Who receives your data (third-party recipients and sub-processors)

To deliver its features, StickScout transmits your coordinates (and, for reports, the report contents) to the third parties below. Each is an independent service with its own privacy policy. We share only what a feature needs.

4.1 Server/API recipients (contacted to fulfill a request)

On iOS, geocoding and nearby-course lookups are performed through Apple MapKit. On the web, those same functions use Nominatim, Overpass, and Open-Meteo. The Android app follows the platform equivalents.

4.2 Embedded third-party content (loads in your app/browser)

Because the Windy radar is embedded content, your interaction with it is also governed by Windy's own privacy policy and terms. If you do not open the radar view, the radar embed is not loaded.

4.3 Other recipients

• App stores / payment processors (Apple, Google, and/or a web payment processor) — only if and when you purchase a subscription (see Section 6).
• Legal and safety — we may disclose data if required by law, to enforce our Terms, or to protect the rights, safety, and security of users, the public, or StickScout LLC.
• Business transfer — if StickScout LLC is involved in a merger, acquisition, or sale of assets, data may transfer as part of that transaction, subject to this policy.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

5. Data retention

• Location used for calculations is used transiently to answer your request. We do not maintain our own persistent log of your location history for these features. The third-party recipients in Section 4 retain request data according to their own policies.
• Crowd condition reports (course, coordinates, status, note, device identifier, timestamp) are stored in Supabase so the App can show current conditions. Reports are surfaced to users on a rolling recency window (roughly the last few weeks), after which they age out of displayed results. We retain the underlying records until they are deleted on request or removed under our retention practices.
• Local settings and the device identifier persist in your device's local storage until you clear it (for example, by clearing site data / localStorage in your browser, or deleting the app's data on mobile).

6. Payments and subscriptions (if and when offered)

The core App can be used without payment. If paid subscriptions or in-app purchases are introduced, they will be processed by the applicable platform:

• Apple In-App Purchase on iOS,
• Google Play Billing on Android, and/or
• a web payment processor for web purchases.

Those providers process your payment information under their own privacy policies. We receive confirmation of your purchase and subscription status, but we do not receive or store your full payment card details. See the Terms of Service for pricing, auto-renewal, and refund terms.

7. International data transfers

StickScout is operated from State of California, USA, and the third-party recipients in Section 4 may process data in the United States, the European Union, or other countries. Our Supabase database is hosted in the United States (Oregon / AWS us-west-2). If you use the App from outside the country where a recipient processes data, your data may be transferred internationally.

Where such transfers involve personal data of individuals in the EEA or UK, we and our recipients rely on lawful transfer mechanisms such as the European Commission's Standard Contractual Clauses or an applicable adequacy decision, as offered by each recipient.

8. Your rights and choices

8.1 Everyone

• Turn location off at any time in your browser or device settings. The location-dependent features simply won't run.
• Don't submit reports if you don't want your report data stored.
• Clear local storage to remove your device identifier and preferences from your device.

8.2 GDPR / UK GDPR rights (EEA, UK, and similar)

Subject to conditions in the law, you have the right to: access your personal data; request rectification or erasure; restrict or object to processing; data portability; and withdraw consent at any time. You also have the right to lodge a complaint with your local data protection authority.

8.3 California rights (CCPA/CPRA) and similar U.S. state laws

Subject to conditions in the law, California residents (and residents of other U.S. states with comparable laws) have the right to: know/access the categories and specific pieces of personal information collected; delete personal information; correct inaccurate personal information; and opt out of "sale" or "sharing" of personal information and of certain profiling.

We do not sell or share personal information as those terms are defined under the CCPA/CPRA, so there is no sale/share to opt out of. We will not discriminate against you for exercising your rights.

The categories of personal information we collect map to the CCPA/CPRA categories: identifiers (the random device identifier, IP address) and geolocation data (your coordinates), plus any information you place in a report note. We collect these for the business purposes described in Section 3.

8.4 How to exercise your rights (this App has no user accounts)

Because StickScout has no login and no account, we cannot look you up by name or email. To exercise access, correction, or deletion for crowd reports you submitted, email support@stickscout.com and include either:

• your device identifier (the dev_... value; on the web you can find it in your browser's localStorage under the key ttDeviceId), or
• enough detail to locate the report(s): the course name, the approximate date you reported, and the status you submitted.

We will use that information solely to find and act on your request. We may ask for additional detail to verify a request or locate the records, and we will respond within the timeframes required by applicable law. For requests about data held by a third-party recipient (Section 4), you may also need to contact that recipient directly.

9. Children's privacy

StickScout is intended for a general golfing audience and is not directed to children under 13 (or under 16 where a higher minimum age applies under local law). We do not knowingly collect personal data from children below the applicable age. If you believe a child has provided us personal data, contact support@stickscout.com and we will delete it.

10. Security

We use reasonable technical and organizational measures to protect data, including transport encryption (HTTPS) and row-level access controls on our database. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Third-party services and links

The App relies on and links to third-party services (Section 4) and may display links to course websites and phone numbers. We are not responsible for the content or privacy practices of those third parties. Course data shown in the App is derived from OpenStreetMap and is © OpenStreetMap contributors, provided as-is; see the Terms of Service.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where required by law, provide additional notice. Your continued use of the App after an update means you accept the revised policy.

13. Contact

Questions or requests: support@stickscout.com
Operator: StickScout LLC — [mailing address TBD on LLC formation] (StickScout LLC)