Privacy Policy

The 18 Club("we," "us," "our") respects your privacy. This Privacy Policy explains what personal information we collect, how we use it, and your choices regarding that information when you use our platform at the18club.com (the "Platform").

1. Information We Collect

Information you provide directly:

• Account data — name, email address, and password when you register.
• Profile data — golf handicap (average score), shirt size, and other optional details you provide.
• Event data — tournament names, dates, courses, team assignments, registration details, and scores submitted by you or your organizer.
• Payment data — when billing is enabled, payment card details are collected and processed directly by Stripe. We receive only a payment token and high-level transaction status — we never see or store full card numbers.
• Communications — messages you send to us via email or support channels.

Information collected automatically:

• Usage data — pages visited, features used, time on Platform, and referring URLs.
• Device/browser data — IP address, browser type, operating system, and device identifiers.
• Cookies and session tokens — we use cookies to maintain your authenticated session. See Section 7 for details.

2. How We Use Your Information

We use your information to:

• Create and manage your account and authenticate your sessions.
• Provide Platform features: event management, pairings, scoring, leaderboards, and registration workflows.
• Send transactional emails (registration confirmations, event invitations, password resets) via Resend.
• Process subscription payments when billing is enabled.
• Respond to support inquiries and troubleshoot issues.
• Improve the Platform through analytics on usage patterns.
• Comply with legal obligations.

We do not sell your personal information to third parties, and we do not use your data for advertising purposes.

3. How We Share Your Information

We share your information only in the following circumstances:

• Within your event — organizers can see participant names, registration status, team assignments, and scores for events they manage. Other participants may see your name and score on shared leaderboards within your event.
• Service providers — we share data with trusted vendors who help operate the Platform (see Section 4). They are contractually bound to protect your data and may only use it to perform services for us.
• Legal requirements — we may disclose information if required by law, court order, or to protect the rights, property, or safety of The 18 Club, our users, or others.
• Business transfers — if The 18 Club is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

4. Sub-Processors and Third-Party Services

We rely on the following services to operate the Platform:

5. Data Retention

We retain your account data for as long as your account is active. If you request deletion, we will remove your personal information within 30 days, except where retention is required by law or legitimate business necessity (e.g., billing records). Anonymized or aggregated data may be retained indefinitely.

Event data (scores, pairings, results) associated with your account may be retained for historical tournament records; if you request deletion we will anonymize rather than delete such records where doing so would affect other participants' data.

6. Security

We implement reasonable technical and organizational measures to protect your personal information, including encrypted data transmission (TLS), row-level security in our database, and access controls. However, no system is completely secure. Please use a strong, unique password and contact us immediately at support@the18club.com if you believe your account has been compromised.

7. Cookies

We use strictly necessary cookies to maintain your authenticated session (via Supabase SSR cookie-based auth). We do not currently use advertising cookies or cross-site tracking cookies. If you block all cookies, you will not be able to log in or access protected features of the Platform.

8. Your Rights and Choices

Depending on your location, you may have the right to:

• Access — request a copy of the personal information we hold about you.
• Correction — request that we correct inaccurate or incomplete information.
• Deletion — request that we delete your personal information (subject to legal retention requirements).
• Portability — request your data in a structured, machine-readable format.
• Opt-out of marketing — unsubscribe from any promotional emails via the link in those emails. Transactional emails (e.g., password reset) cannot be disabled while you have an active account.

To exercise any of these rights, contact us at support@the18club.com. We will respond within 30 days.

9. Children's Privacy

The Platform is not directed to children under 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us and we will delete it promptly.

10. International Users

The Platform is operated in the United States. If you access it from outside the US, your information will be transferred to and processed in the United States. By using the Platform, you consent to this transfer. We take steps to ensure adequate protections are in place when transferring data internationally.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or a prominent notice on the Platform before the changes take effect. The effective date at the top of this page reflects the most recent revision.

Privacy questions or requests?

Email us at support@the18club.com. We aim to respond within 5 business days for general inquiries and 30 days for formal data subject requests.