Privacy policy

Data controller

Romain Michaux, publisher of GolfWiki on a personal basis, is the controller responsible for the data described here. Contact: support@golfwiki.fr

Data collected

Depending on how you use the site:

• If you sign in with Google: your name, email address, and profile picture.
• If you sign in via a magic link sent by email: your email address only.
• If you create or join a road trip (no sign-in required): the participant names/nicknames you enter, expenses, golf scores, the name and geographic location of courses (derived from the course name you enter, never your own location), and any trip photo/logo you add.
• Technically, your IP address may be briefly retained in our hosting provider's logs for security purposes (abuse prevention).

Why we use this data

Only to run the service you're using: organizing a golf road trip with a group (expenses, scores, rankings), and letting you find your trips again if you choose to create an account.

Legal basis

Performance of the service you explicitly request (creating a trip, adding a score) and, for account sign-in, your explicit consent at the moment you choose to sign in.

Data recipients

Your data is never sold or shared for advertising purposes. It is only processed by the technical providers needed to run the site:

• Vercel Inc. — site hosting and trip image storage
• Upstash, Inc. — the database storing trip and account information
• Google LLC — only if you choose to sign in with a Google account
• Resend — sends the sign-in email if you choose the magic-link sign-in
• OpenStreetMap (Nominatim) — to locate a course on the map from its name (only the searched name is sent, from our servers, never any data about you)

Transfers outside the European Union

Vercel and Upstash are companies based in the United States. These providers rely on the European Commission's standard contractual clauses as a safeguard for their data transfers outside the EU.

Retention period

• A trip's data (participants, scores, expenses) is automatically deleted after 12 months of no activity on that trip.
• A sign-in session expires after 24h of inactivity.
• An account (if you signed in) is kept until you request its deletion.
• Removing a trip from "My trips" only takes it off your personal list: the trip's data remains accessible via its link until it expires or you request its deletion.

Your rights

Under GDPR, you have the right to access, rectify, erase, and port your data, as well as a right to object. GolfWiki doesn't yet offer one-click deletion for a trip or account: write to us at support@golfwiki.fr and we'll handle your request as soon as possible.

Security

Passwords don't exist on GolfWiki (passwordless sign-in): there's nothing to steal on that front. Trip links are not indexed by search engines and should be treated as a secret to share only with your group.

Complaint

If you believe your rights are not being respected, you can file a complaint with the CNIL (France's data protection authority, www.cnil.fr) or your local supervisory authority.