Privacy
Two different kinds of people appear in this system, and they are owed different explanations. Golfers come first, because they never signed anything.
Effective October 1, 2026.
This section is for golfers and for the parents of children who played. You did not create an account, you were not asked to agree to anything, and you should not have to read a contract to find out what happened to your child’s name. So, plainly:
No last names. No email addresses, phone numbers, birthdates or ages. No photographs, audio or video. No location beyond which course the round was played on. There is no golfer account to create and no way to create one, by design.
On the television screens at the venue, for the duration of the round and while the finished-round board still shows it. That is the entire point of the product and it is the one thing to understand before entering a name: it is a public screen in a public place. If that is not wanted, a nickname gives the same game with none of the exposure.
Names are permanently deleted 30 days after the round finishes: the player names, the team name, and the temporary code on the phone. Removed from the record, not hidden. The scores stay, with nobody’s name attached, so a venue can keep a course record. This runs as a scheduled job and the system reports its own health, because a deletion rule that quietly stops running is worse than never having had one.
One honest exception: encrypted backups. We keep two weeks of them so a failed server does not lose a venue’s season, which means a name deleted today can still exist in a backup for up to two weeks afterwards before ageing out. Those backups are encrypted and are never read except to restore the system. Our longer-term archives contain no player data at all.
Children play mini golf, so children’s first names go on these screens. The system is deliberately built so that what is held about a child is as close to nothing as a scoreboard allows: a first name or nickname with no surname, no contact details, no age, no persistent identifier that could follow them anywhere, no advertising or analytics of any kind, and automatic deletion after 30 days.
We do not knowingly collect anything beyond that from a child, and there is no mechanism in the product by which we could. If you believe something more was collected about your child, write to [[privacy@minigolfscoreboard.com]] and it will be deleted.
Ask the venue, or write to [[privacy@minigolfscoreboard.com]] with the venue and the approximate date and time of the round. A name can be removed immediately on request. There is no need to wait out the 30 days, and no need to explain why.
Venue staff have accounts, which is a different kind of relationship and a different set of rules.
Your sign-ins are logged. Each session records the IP address it came from, the browser and device it used, when it started and when it was last used. You can see all of it for your own account, and end any session you do not recognise. We keep sign-in history for 90 days and then delete it.
That is the opposite of how golfers are treated above, and the difference is deliberate. You have an account and agreed to terms, and being able to look at a list and say “that one is not me” is the whole point of having one. A golfer agreed to nothing and is often a child, so nothing of the sort is recorded about them.
Card details never reach our servers. Checkout and billing management are hosted by Stripe, and the browser goes to Stripe directly. There is no card field anywhere in this application and no endpoint that would accept one. We receive confirmation that a subscription is active, which plan it is on, and when the period ends. We never see a card number, and we could not store one if we wanted to.
For as long as the account is in use, and then deleted on request or when the venue’s data is deleted. The 30-day rule above is about golfers, who never asked for an account; it would make no sense to apply it to a manager who needs the same login next season.
For golfer data, the venue decides to run the boards and we act on its instructions. In GDPR terms the venue is the controller and we are its processor. For venue staff accounts and billing, we are the controller. Venues subject to the GDPR or UK GDPR should have a data processing agreement with us; ask at [[privacy@minigolfscoreboard.com]] and one will be provided.
Deliberately almost nobody. There are no analytics, no advertising networks, no tracking pixels, no session recorders and no tag managers on the golfer scorecard or anywhere else. This is enforced by a Content-Security-Policy rather than left to good intentions, so a dependency that quietly starts calling home breaks visibly instead of working silently. Sponsor images are served from our own storage, not from an ad network. The only third parties involved at all are Stripe, for payment, and the hosting provider that runs the servers.
The servers are in the United States. A venue in the EU or the UK whose golfers’ data is processed here is relying on Standard Contractual Clauses, which form part of the data processing agreement above. We have not appointed an Article 27 representative in the Union, because we do not yet serve a venue that requires one; if you are that venue, say so before signing and it will be arranged rather than glossed over.
Depending on where you live, you may have the right to see what is held about you, to correct it, to have it deleted, to object to it being processed, or to receive a copy. Write to [[privacy@minigolfscoreboard.com]]. There is no charge, and we do not require a reason.
We do not sell personal information and we do not share it for cross-context behavioural advertising, under the meaning the California Consumer Privacy Act gives those terms or under any other. There is no opt-out link below this paragraph because there is nothing to opt out of. There is no profiling and no automated decision-making.
Everything travels over TLS. Passwords are hashed with Argon2id. The database is not reachable from the public internet. Backups are encrypted and kept off the server. No part of the product runs with more privilege than it needs.
If this policy changes in a way that matters, the effective date at the top changes with it and venues are told by email. We will not quietly start collecting something this document says we do not.
Mini Golf Scoreboard is a product of Skeepyr, a trading name of Civilian Software, LLC. Civilian Software, LLC is the company responsible for your data and the one you are contracting with.
Civilian Software, LLC
7901 4th St N #36406, St. Petersburg, FL 33702
[[privacy@minigolfscoreboard.com]]