The fine print

Your privacy

What this site keeps about you, who can see it, and how to get it changed or removed. Last updated October 6, 2026.

The short version

This is a private site for one golf trip and the friends on it, run by the trip’s organizers (“we” below).
We keep only what it takes to run the trip: who’s coming, scores, side bets, payments and messages between players.
No ads, no tracking or analytics tools, and we never sell or share your information with anyone outside the trip.
Want something changed or deleted? Email brosbeforeboges@lokdit.net.

What we keep

Your account: Your email address and a password. Passwords are handled by our login service and stored scrambled (hashed), so nobody, including us, can read them.
Your roster details: Your name, GHIN number, handicap and Cup team.
RSVPs: Your answer (in, probably or out), whether you’re up for the Sunday round, and any note you add. Every change is kept, so the waitlist order is fair.
Money: Your Venmo username if you add one, deposits and trip payments the organizers record, and the “Paid” marks on The Bookie’s settle-up. No card or bank details ever touch this site: paying happens in Venmo.
The Bookie and scores: Bets you post or join, results, comments, and the scores entered in the Round Tracker.
Messages: Messages you send to other players, when they were sent, and when they were read.
Notifications: The list in the bell at the top of the page: each notification sent to you, and whether you’ve seen it. If you also turn them on for a phone: the address your phone’s notification service gives this site and a short description of your browser (so you can tell your phones apart). Notifications older than 30 days are cleared whenever a new one goes out.

Who can see what

Anyone who visits

Names on the roster, GHIN numbers and handicaps, teams, the head count (who’s in, without notes), the schedule and tee times, scores and the live board.

Logged-in players the commissioner has approved

The Bookie’s bets, results and comments, Venmo usernames, “Paid” marks, the shared photo album link, and who has notifications turned on (so a challenge can say they’ll hear about it). A new sign-up sees none of this until the commissioner approves them.

Only you

Your email address, your RSVP notes and your own payment history (the organizers see these too). Your messages are seen only by you and the player you’re talking to.

The organizers

What Admin shows: everyone’s email, RSVP notes and payments, and how many players and phones have notifications on. The site gives them no way to read messages between players.

The organizers who run the database can technically reach anything stored in it; that access is only used to keep the site working, never to read private messages.

Notifications

They go to approved players only, and always show up in the bell at the top right of the page. Banners on your phone are off until you turn them on from the bell, phone by phone, and you can turn them off there any time. They tell you about challenges and results, comments on your bets, payments involving you, tee times, roster news, messages to you and the commissioner’s announcements. Each one travels through your phone’s own notification service (Apple’s, Google’s or Mozilla’s) encrypted, so that service carries it without being able to read it.

Services the site uses

Supabase stores the data and runs logins.
Vercel hosts the site and sends notifications.
Google Workspace sends the login and password-reset emails from brosbeforeboges@lokdit.net.
FormSubmit forwards new RSVPs, sign-ups and deposit claims (name, answer and note) to the organizers’ inbox.
Venmo, only when you tap a Pay button: the site opens Venmo with the amount filled in.
Google Fonts, jsDelivr and cdnjs deliver the site’s fonts and code. Like any website, they see your device’s IP address when they do.
The shared photo album (Google Photos or iCloud) follows that service’s own privacy terms.

What’s saved on your phone

Your login, so you stay signed in. The Round Tracker’s offline copy and any scores waiting for a signal. Whether notifications are on. An unsent message draft until you close the page. No advertising cookies, and nothing that follows you to other sites.

How long we keep it

Trip results, rosters and the Hall of Fame are kept as the group’s history. RSVPs, bets and payments are kept with the trip they belong to. Messages stay until the sender unsends them. Notification records older than 30 days are cleared whenever a new one goes out. Ask us and we’ll delete your account and what goes with it, except past results that other players’ records depend on, which we can keep under your name or remove your name from.

Your choices

Change your GHIN, handicap or Venmo username in your Golf profile on the homepage.
Turn phone notifications off from the bell, on any phone, any time.
Unsend any message you’ve sent: it disappears for both of you (a notification already on their phone stays there).
Email brosbeforeboges@lokdit.net to see what we have on you, correct it, or delete it.

How it’s protected

Every connection to the site is encrypted. The database has rules that limit what each person can read or change to what’s theirs, and anything private goes through checks tied to your own login, so the site itself can’t be used to read someone else’s details or messages. Messages and announcements are limited in length and in how many can be sent, and links in notifications can only open pages on this site. No system is perfect: if you ever spot something wrong, tell us.

Changes

If this changes, the date at the top changes with it, and anything that matters will go out as a trip update.