Privacy Policy
Last Updated: May 11, 2026Version: 2026.05.11
Information We Collect
When you use Lazy Golfing, we collect information you provide directly:
- Account information (name, email, profile photo) via Google Sign-In
- Golf round data you choose to log (scores, courses, dates, statistics)
- League and group activity (membership, events, standings)
- Profile preferences and settings
- Device and usage information (browser type, pages visited, performance, and errors) for analytics when analytics is configured
- Local device storage used for offline score entry, sync queues, theme settings, and app preferences
How We Use Your Information
- To provide and improve our golf tracking services
- To calculate statistics and LazyCap estimates
- To enable social features like leagues, groups, and playing partners
- To process payments and manage subscriptions via Stripe
- To send transactional emails (receipts, trial reminders, payment notifications)
- To communicate service updates and new features
Data Collection Transparency
| What We Collect | Why | Retention |
|---|---|---|
| Email, name, avatar | Account management | Until account deletion |
| Golf round data | Core platform functionality | Until account deletion |
| League activity | League management features | Until account deletion |
| Subscription status, plan type, billing dates | Subscription billing | Until account deletion |
| Device/browser info | Analytics and service improvement | Aggregated analytics retention depends on the configured provider |
| Offline app data | Offline scoring and sync recovery | On your device until synced, cleared, or storage is reset |
Payment & Financial Data
All payments are processed by Stripe (opens in new tab), a PCI-DSS Level 1 certified payment provider. We do not store, process, or transmit payment card data. The only payment-related information we store is your subscription status, plan type, and billing dates — never your card number, CVV, or full billing details.
Data Storage & Security
Your data is stored securely on servers located in the United States using industry-standard encryption. We use PostgreSQL databases with regular automated backups and SSL/TLS for all data transmission.
Third-Party Services
We share data with the following third-party services only as necessary to operate the platform:
- Google— OAuth authentication (name, email, avatar)
- Stripe— Payment processing (subscription management)
- Resend— Transactional email delivery
- Cloudflare— Hosting, CDN, and security
- Google Analytics— Optional usage analytics when configured
- Cloudflare Web Analytics— Optional privacy-focused page analytics when configured
We do not sell, rent, or trade your personal information to third parties.
Cookies & Tracking
We use cookies and local browser storage to keep you signed in, protect requests from forgery, remember preferences, support offline score entry, and measure whether the service is working. We do not use cookies for behavioral advertising or cross-site ad tracking.
| Storage | Purpose | Notes |
|---|---|---|
| Session cookies | Sign-in and account security | Includes HttpOnly lg_jwt and lg_refresh cookies set by the API |
| CSRF cookies | Request-forgery protection | Uses the readable csrf_token cookie to verify browser requests sent to the API |
| Local storage and IndexedDB | Theme, preferences, offline queues, and sync recovery | Includes lzg-query-cache-v1 and offline IndexedDB data stored on your device |
| Google Analytics | Optional usage, engagement, performance, and error analytics | Loads only when a measurement ID is configured |
| Cloudflare Web Analytics | Optional page analytics and performance measurement | Loads only when a Cloudflare beacon token is configured |
Optional analytics are on for this browser.
Your Rights
You have the right to:
- Access your personal data at any time via your profile
- Export your golf round history and personal data
- Correct any inaccurate personal information via your profile settings
- Delete your account and all associated data at any time
- Opt out of non-essential communications
We do not sell your personal information. Because we do not sell data, there is no need for a "Do Not Sell My Personal Information" mechanism, but we support your right to inquire about our data practices at any time.
International Users
Our servers are located in the United States. If you access our service from outside the United States, you consent to the transfer and processing of your data in the United States.
Contact Us
For privacy-related questions, contact us at [email protected]
See also our Terms of Service.