Privacy policy

Account information. When you sign in via email magic link, we store your email address. If you sign in with Discord, we store your Discord user ID, username, display name, avatar, and email (when provided by Discord). We also record which Discord servers you're a member of (specifically, whether you're in our community server) so we know whether to grant you member features.

Profile information. If you build a profile (handicap, social handles, sim setup, etc.), we store what you provide.

Your name, postal address and phone number. These are optional, and you choose whether any of it shows publicly. We ask for a postal address and phone number for one reason: so we can post you a prize if you win a tournament. We do not sell, rent or share them, and we do not use them for marketing. Your street address, postcode and phone number are deleted automatically after 18 months of account inactivity; your city, state and country are kept, because that is the part members choose to display on a profile. All of these fields, along with your first and last name, are encrypted at rest on our servers rather than stored as plain text. If we ever offer a mailing list, it will be a separate opt in that we ask you for at the time, and it will not reuse an address you gave us for prizes.

Order information. When you make a purchase, we store the items ordered, totals, customer email, billing & shipping address, and order status. Stripe processes the payment itself; we never see or store your full credit card number on our servers.

Communications. If you email us, we'll keep that email so we can respond and reference it later if you contact us again.

Activity times. While you are signed in, we record when you were last active on the Site. This is stored for every signed-in member, whether or not you play in a tournament. If you do play in a tournament, we also record when you last replied about a match (proposing, accepting or declining a time) and when you last opened your scheduling.

Tournament admins running an event you are in can see these three times for you. They exist so a match that is not getting booked can be chased with the right person, and they decide who an automatic scheduling reminder is addressed to. We do not use them for anything else and other members cannot see them. The two activity clocks are deleted when you delete your account. The scheduling actions themselves, the times you proposed, accepted or declined, stay with that event's records, because a bracket has to remain a complete account of what happened.

Technical data. Like every website, our hosting provider (Vercel) automatically logs basic technical info: IP address, user agent, request paths, and timestamps. This is used for security, performance, and debugging.

Cookies & similar tech. We use one essential, first-party session cookie (golf_bracket_session) to keep you signed in; it's required for the site to work and can't be switched off. Our own page analytics (Vercel Web Analytics) is cookieless and doesn't track you across other sites. We don't run ad-network retargeting. Some features do set non-essential third-party cookies: our affiliate partner (AvantLink) sets a cookie to attribute purchases you make after tapping an affiliate link, and embedded videos (YouTube, Twitch, TikTok, Kick) set their own cookies when they load. You control these through our cookie banner: visitors in the EEA, UK, and Switzerland must opt in before any non-essential cookies load, and anyone can change their choice at any time using the Cookie preferences link in the site footer.

• To authenticate you and keep you logged in.
• To process and fulfill your orders.
• To send transactional emails (sign-in links, order receipts, shipping notifications).
• To grant member-only access (tournaments, posts, member directory) based on your Discord server membership.
• To respond when you contact us.
• To detect fraud, abuse, and security incidents.
• To improve the Site: understand which pages people visit, what works, what's broken.

We do not sell your personal information. We do not run ad-network retargeting on you.

We share data with these third parties because we need them to run the Site:

We may also share information with law enforcement if required by valid legal process, or with a successor in interest (e.g., if we're acquired or reorganized).

Account & profile data: kept while your account exists, plus a reasonable period after closure for backup and dispute resolution.

Order data: kept for at least 7 years to satisfy financial recordkeeping requirements.

Server logs: rotated by our hosting providers within their standard windows (typically 30-90 days).

You have the right to:

• Access a copy of the personal information we hold about you.
• Correct inaccurate information (most fields are editable in your profile).
• Delete your account and associated personal data, subject to retention requirements for orders, and to tournament records: matches you played, and the scheduling actions inside them, stay with the event so a bracket remains a complete account of what happened.
• Opt out of non-transactional emails.
• Restrict or object to certain processing.

To exercise any of these, email us at tbg@mysimsetup.com. We'll respond within a reasonable time.

California residents have additional rights under the CCPA, and EEA/UK residents have additional rights under GDPR. We honor those rights even though we're a U.S. company; the contact above is the channel.

The Site is not intended for users under 18. We do not knowingly collect information from children. If you believe a child has given us their data, contact us and we'll delete it.

We use HTTPS for all traffic, encrypted data storage, and platform-level access controls at our hosting and database providers. No system is perfect. If a breach affects you, we'll notify you as required by applicable law.

The Site is hosted in the United States. By using the Site you consent to your data being transferred to and processed in the U.S. and any country where our service providers operate.

We may update this Privacy Policy. The “Last updated” date at the top reflects the most recent change. For material changes, we'll post a notice on the Site or notify you by email.

Questions about this Privacy Policy or your personal information? Reach us at tbg@mysimsetup.com.