StickScout — Privacy Policy

Effective date: August 6, 2026 · Last updated: August 6, 2026

This Privacy Policy explains what personal data StickScout ("StickScout," the "App," "we," "us," or "our") collects, why we collect it, who we share it with, and the choices and rights you have. It applies to the StickScout web app, iOS app, and Android app.

StickScout is provided by StickScout LLC ("StickScout LLC"), a company operated by its founder, Chris.

Controller / operator: StickScout LLC — 2108 N St, STE 14683, Sacramento, CA 95816
Contact for privacy requests: support@stickscout.com

StickScout helps golfers plan tee times around daylight, pace of play, frost and morning conditions, and nearby-course maintenance status. To do that, the App needs to know where you are or where you plan to play. This policy is written to be specific about how that location data is used, because location is the most sensitive data the App handles.

1. Summary (the short version)

• The App uses your location (GPS or a place you type in) to compute daylight, pacing, frost risk, and nearby courses. This is the core function of the App.
• To do that, your coordinates are sent to third-party services — weather, mapping/geocoding, radar, and course-data providers. We name each of them below.
• You can use the core App without an account. An account (email address, or Sign in with Apple) is only needed to post a review, save a round, or manage a course or shop listing.
• If you submit a crowd condition report, we store the report with a random per-device identifier (not your name). That identifier is pseudonymous personal data, and the rights described below apply to it.
• If you sign in and save a round, we store which course you played and when — a location history tied to your account. You can use the round tracker without an account, and nothing about that round leaves your device.
• We do not sell your personal information and do not use it for cross-context behavioral advertising.
• The App is not directed to children under 13 (or under 16 where a higher age applies).

2. Data we collect

2.1 Location data (precise and/or coarse)

• How: Through your device's location services (browser Geolocation API on the web; Apple Core Location on iOS; the equivalent platform location service on Android), or by you typing a place, city, or course name into the App.
• What: Latitude/longitude coordinates. Depending on your device settings and how you use the App, this may be precise (GPS-level) or coarse (approximate). On the web you can request high-accuracy positioning; on mobile you control precise vs. approximate location through the operating system's permission controls.
• Why: To compute sunrise/sunset/twilight times, tee-time pacing, frost and morning-condition risk, and to find and rank nearby golf courses and practice facilities.
• On-course use: While a round is live, the App reads your location continuously to show distances to the green, place you on the hole you're playing, and advance your scorecard automatically. This live position is processed on your device in real time — we do not record or transmit a track of where you walked. Only the round summary described in 2.3a (which course, the times, and hole-by-hole pace) is saved, and only if you are signed in.

2.2 Data you submit (crowd condition reports)

When you report a course's condition (for example, "aerating," "recovering," "overseeding," "closed," or "normal"), we store:

• the course name and its approximate coordinates,
• the status you selected,
• an optional free-text note you write, and
• a random device identifier (see 2.3).

Do not put personal information about yourself or others into the free-text note. See the Terms of Service for rules on user-submitted content.

2.3 Device identifier and local settings

• The App generates a random device identifier (a value like dev_xxxxx) the first time you submit a report, and stores it in your browser's localStorage (web) or the equivalent local storage on mobile. It is not linked to your name, email, or an account, but because it is a persistent unique identifier that we store alongside your reports and coordinates, we treat it as pseudonymous personal data subject to the rights in Section 8.
• We also store simple preferences locally, such as your units choice (metric/imperial). These stay on your device.
• We use localStorage, not tracking cookies, for the App's own storage. We do not set advertising or cross-site tracking cookies. Embedded third-party content (see 4.2, the Windy radar) may set its own cookies or storage, governed by that third party's policy.

2.3a Round history (only if you sign in and save a round)

The App includes a live-round tracker that estimates whether you'll finish before dark and measures your real pace of play. You can use the tracker without an account, in which case the round stays on your device and is never sent to us.

If you are signed in, or if you sign in when a round finishes and choose to save it, we store a record of that round:

• the course you played (name and identifier) and its approximate coordinates,
• the date and times the round started and ended,
• how many holes you played and how long each hole took,
• how each hole advance was recorded (you tapped it, or the App detected it), and
• your account identifier.

This record is linked to your account, unlike condition reports. It is, in effect, a history of which golf courses you were at and when — so we've set it out separately rather than folding it in with the rest.

If you add a post-round check-in, we also store the fixed choices you select (greens condition, maintenance seen, how busy it was, how the pace felt, whether you walked on). These are multiple-choice only — there is no free-text field on a round.

2.3b Account data (optional)

Creating an account is optional. If you do, we store your email address, an account identifier, an optional display name, and your saved preferences (units, default pace, home course). If you use Sign in with Apple and choose to hide your email, we receive only Apple's private relay address. Accounts are handled by Supabase Auth (see Section 4). An account is required to post a course review, save a round, or claim a course or shop listing.

2.4 Technical data

When your device contacts our services or the third-party services listed below, those services necessarily receive your device's IP address and standard request metadata (for example, user-agent and timestamps), as happens with any internet request. We use this only to deliver and secure the service, not to build advertising profiles.

2.4b Product analytics (usage events)

To understand which parts of StickScout are useful and where people get stuck, we record a small, fixed set of usage events — for example that the app was opened, that a course page or the conditions view was opened, that a round was started, or that the subscription screen was shown. Events carry a randomly generated identifier, the platform (web, iOS, Android), and, where relevant, the public identifier of the golf course involved. If you are signed in, the event is associated with your account's internal user ID.

What these events deliberately do not contain:

• No precise location. Your coordinates are never sent to our analytics provider.
• No content you write — review text, condition notes, and round notes are excluded.
• No email address, display name, phone number, or address.
• No session recording or screen capture, and no automatic capture of what you tap or type. Every event is one we have explicitly chosen to record.
• No advertising or cross-site tracking identifiers, and no data is used for advertising or sold to anyone.

If your browser or device sends a “Do Not Track” signal, we do not record these events at all.

2.5 What we do NOT collect

• We do not require or collect your name, phone number, or a password to use the core App. An email address is collected only if you choose to create an account (see 2.3b); we never ask for a phone number.
• We do not collect payment card details directly; if and when paid subscriptions are offered, payments are handled by the applicable app-store or payment processor (see Section 6).
• We do not knowingly collect data from children (see Section 9).

3. Purposes and legal bases

For users in the European Economic Area, the United Kingdom, and other regions with similar laws, our legal bases under the GDPR are:

Round history. We use your saved rounds to (a) show you your own round history and pace over time, and (b) compute anonymised, aggregate pace-of-play statistics for each course, so other golfers can see how long a round there actually takes. Aggregate statistics are only published for a course once at least five rounds have been recorded there, and they contain no information about any individual round or golfer.

Where we rely on consent, you may withdraw it at any time by turning off location access in your browser or device settings, by not submitting reports, or by deleting a saved round or your account. Where we rely on legitimate interests, you may object as described in Section 8.

4. Who receives your data (third-party recipients and sub-processors)

To deliver its features, StickScout transmits your coordinates (and, for reports, the report contents) to the third parties below. Each is an independent service with its own privacy policy. We share only what a feature needs.

4.1 Server/API recipients (contacted to fulfill a request)

Geocoding and nearby-course lookups go through Apple MapKit on every platform. Course, facility and condition data itself comes from our own Supabase database rather than a live third-party query.

4.2 Embedded third-party content (loads in your app/browser)

Because the Windy radar is embedded content, your interaction with it is also governed by Windy's own privacy policy and terms. If you do not open the radar view, the radar embed is not loaded.

4.3 Other recipients

• App stores / payment processors (Apple, Google, and/or a web payment processor) — only if and when you purchase a subscription (see Section 6).
• Legal and safety — we may disclose data if required by law, to enforce our Terms, or to protect the rights, safety, and security of users, the public, or StickScout LLC.
• Business transfer — if StickScout LLC is involved in a merger, acquisition, or sale of assets, data may transfer as part of that transaction, subject to this policy.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

5. Data retention

• Location used for calculations is used transiently to answer your request. We do not maintain our own persistent log of your location history for these features. (Saved rounds are a separate, opt-in record — see below.) The third-party recipients in Section 4 retain request data according to their own policies.
• Crowd condition reports (course, coordinates, status, note, device identifier, timestamp) are stored in Supabase so the App can show current conditions. Reports are surfaced to users on a rolling recency window (roughly the last few weeks), after which they age out of displayed results. We retain the underlying records until they are deleted on request or removed under our retention practices.
• Saved rounds are retained while your account exists so you can see your own history. You can delete any individual round yourself, at any time, from Round history in the app's menu.
• If you delete your account, your rounds are the one thing that is not deleted — they are de-identified instead. We remove the link to your account, so the round can no longer be associated with you, but the anonymous record is kept because it has already been counted into that course's published pace average; removing it would silently change a statistic other golfers rely on. After de-identification the record holds no identifier of any kind — only a course, a date, and durations. If you want your rounds erased outright rather than de-identified, say so and we will delete them — see Section 8.
• Account data (email address, display name, preferences) is retained until you delete your account, at which point it is deleted. Everything else tied to your account — your profile and any reviews you have posted — is deleted outright at the same time.
• Rounds you never saved (played while signed out) exist only on your device and are removed when you clear the app's local storage.
• Local settings and the device identifier persist in your device's local storage until you clear it (for example, by clearing site data / localStorage in your browser, or deleting the app's data on mobile).

6. Payments and subscriptions (if and when offered)

The core App can be used without payment. If paid subscriptions or in-app purchases are introduced, they will be processed by the applicable platform:

• Apple In-App Purchase on iOS,
• Google Play Billing on Android, and/or
• a web payment processor for web purchases.

Those providers process your payment information under their own privacy policies. We receive confirmation of your purchase and subscription status, but we do not receive or store your full payment card details. See the Terms of Service for pricing, auto-renewal, and refund terms.

7. International data transfers

StickScout is operated from State of California, USA, and the third-party recipients in Section 4 may process data in the United States, the European Union, or other countries. Our Supabase database is hosted in the United States (Oregon / AWS us-west-2). If you use the App from outside the country where a recipient processes data, your data may be transferred internationally.

Where such transfers involve personal data of individuals in the EEA or UK, we and our recipients rely on lawful transfer mechanisms such as the European Commission's Standard Contractual Clauses or an applicable adequacy decision, as offered by each recipient.

Our analytics provider (PostHog) processes these events in its United States region. StickScout is distributed in the United States only.

8. Your rights and choices

8.1 Everyone

• Turn location off at any time in your browser or device settings. The location-dependent features simply won't run.
• Don't submit reports if you don't want your report data stored.
• Clear local storage to remove your device identifier and preferences from your device.
• Use the round tracker without saving. The tracker works signed out; nothing about that round reaches us.
• Delete any saved round yourself from Round history in the app's menu. Deletion is immediate and permanent.
• Ask us to erase your rounds outright instead of the de-identification described in Section 5, by emailing support@stickscout.com from your account's email address.
• Delete your account in the App at any time — see Delete your account and data for the exact steps, what is removed, and what to do if you can no longer sign in.

8.2 GDPR / UK GDPR rights (EEA, UK, and similar)

Subject to conditions in the law, you have the right to: access your personal data; request rectification or erasure; restrict or object to processing; data portability; and withdraw consent at any time. You also have the right to lodge a complaint with your local data protection authority.

8.3 California rights (CCPA/CPRA) and similar U.S. state laws

Subject to conditions in the law, California residents (and residents of other U.S. states with comparable laws) have the right to: know/access the categories and specific pieces of personal information collected; delete personal information; correct inaccurate personal information; and opt out of "sale" or "sharing" of personal information and of certain profiling.

We do not sell or share personal information as those terms are defined under the CCPA/CPRA, so there is no sale/share to opt out of. We will not discriminate against you for exercising your rights.

The categories of personal information we collect map to the CCPA/CPRA categories: identifiers (the random device identifier, your account identifier and email address if you create an account, IP address), geolocation data (your coordinates, and the courses and times of any rounds you save), internet or other electronic network activity (standard request metadata), and commercial information (subscription status, if and when paid plans are offered), plus any information you place in a report note or review. We collect these for the business purposes described in Section 3.

8.4 How to exercise your rights (accounts and anonymous reports)

If you have an account, email support@stickscout.com from your account's email address and we can look up your data directly; you can also delete your account in the App, which removes your profile and reviews and de-identifies your saved rounds (see Section 5).

For anonymous crowd reports submitted without an account, we cannot look you up by name or email. To exercise access, correction, or deletion for those reports, email support@stickscout.com and include either:

• your device identifier (the dev_... value; on the web you can find it in your browser's localStorage under the key ttDeviceId), or
• enough detail to locate the report(s): the course name, the approximate date you reported, and the status you submitted.

We will use that information solely to find and act on your request. We may ask for additional detail to verify a request or locate the records, and we will respond within the timeframes required by applicable law. For requests about data held by a third-party recipient (Section 4), you may also need to contact that recipient directly.

9. Children's privacy

StickScout is intended for a general golfing audience and is not directed to children under 13 (or under 16 where a higher minimum age applies under local law). We do not knowingly collect personal data from children below the applicable age. If you believe a child has provided us personal data, contact support@stickscout.com and we will delete it.

10. Security

We use reasonable technical and organizational measures to protect data, including transport encryption (HTTPS) and row-level access controls on our database. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Third-party services and links

The App relies on and links to third-party services (Section 4) and may display links to course websites and phone numbers. We are not responsible for the content or privacy practices of those third parties. Course data shown in the App is derived from OpenStreetMap and is © OpenStreetMap contributors, provided as-is; see the Terms of Service.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where required by law, provide additional notice. Your continued use of the App after an update means you accept the revised policy.

13. Contact

Questions or requests: support@stickscout.com
Operator: StickScout LLC — 2108 N St, STE 14683, Sacramento, CA 95816 (StickScout LLC)