Privacy

In short

• If you create an account, we keep an identifier for your Google account, the name you choose, your avatar and, if you look it up, your handicap.
• We never keep your email (we don't even receive it), your federation licence or your photo.
• You can download or delete everything from your account whenever you like, at once.

Controller

Rodrigo Luque (TeesDeSalida) is the controller of your data.

For any request about your data, write to privacidad@teesdesalida.es.

What we process and why

Your account, only if you sign in with Google

When you sign in with Google, Google sends us an identifier for your Google account, your name and a link to your profile photo. We use only the identifier and your first name, and discard the rest at once, without keeping it. We never receive your email: we don't ask Google for it.

We keep that identifier and the display name you choose (your first name, to begin with). Your account also keeps the avatar you choose, which of the avatar's extras you've earned (only yes or no, never what was counted for them), when you created it and when it last changed, the month of your last visit, the version of this policy you created it under, a counter that goes up each time you sign out (to end your session on all your devices), and how many changes and handicap lookups you've made today, to apply the daily limits. Separately, we keep which account belongs to your Google identifier, and since when.

Why: to keep you signed in and show you the whole week's tee times.

Legal basis: it is needed to give you the service you ask for when you sign in (performance of a contract, GDPR art. 6.1.b).

Your handicap, only if you look it up

If you look up your handicap, your federation licence is sent once to the Real Federación Española de Golf's public search, and we don't keep it. We keep the first name the federation returns, your handicap index and the date of the lookup. The federation answers with more of the licence's details (full name, club…); we keep only the first name and the index. Your handicap doesn't refresh itself: it is the federation's figure on the day you looked it up, and we keep that date. To refresh it, look it up again.

When you look it up, you confirm the licence is yours. If someone falsely confirmed another person's licence, we would hold that person's first name and handicap: the account holder can remove them at any time, and so can we, if you ask at the address above.

Legal basis: it is needed to give you the service you ask for (performance of a contract, GDPR art. 6.1.b).

Search at /search

If you search at /search, only the text you type (with today's date and your language, to understand it) is sent to an AI model (Anthropic, through Vercel AI Gateway), which turns it into a search. It is never tied to your account: /search doesn't know whether you're signed in. We don't keep the text or use it for anything else.

Legal basis: it is needed to give you the service you ask for (performance of a contract, GDPR art. 6.1.b).

Anonymous totals

We count, per day, visits (and how many open from the installed app) and pages viewed; where visits come from, from a fixed list (a search engine, an AI assistant, a social network…); whether seeing the whole week needed an account that day; and which screens are seen and which buttons are tapped, such as a locked day, "Sign in", a club's booking link, or share or propose on a tee time. Also how often an account is created, signed in to, signed out of or deleted, and how often a handicap is looked up.

These are totals with no identifier: no cookies, and nothing stored on your phone.

Legal basis: our legitimate interest in knowing how the site is used (GDPR art. 6.1.f).

Limits against abuse

To limit abuse of accounts and totals, the server turns your IP address into a code, with a random key that changes whenever it starts, which counts for one minute only and stays in its memory at most until it restarts; neither the code nor the address is ever stored in a database. Vercel's firewall also counts the requests from each IP address to stop abuse.

Legal basis: our legitimate interest in protecting the service (GDPR art. 6.1.f).

Vercel's statistics

Vercel, which hosts the site, counts visits anonymously and without cookies (Vercel Web Analytics): how many each page gets, where they come from, which page brings you into the app and how often you go on to a club's website to book. Never the time, party size or price of a tee time. So as not to count the same visit twice, Vercel uses your IP address for a moment and doesn't keep it.

Legal basis: our legitimate interest in knowing how the site is used (GDPR art. 6.1.f).

Who sees your data

Only you. Your name, avatar and handicap appear only in your account, on the devices you sign in on: they aren't in anything you share or on any page, and nobody else sees them in the app. The admin dashboard shows only totals and the number of accounts. We look at the database only to answer a request from you or fix a fault.

Who we share it with

• Google Cloud EMEA Limited (Ireland), and Google LLC for any access from outside the European Union: Google Cloud Firestore holds the account database, and a separate database of anonymous totals, in Madrid, and handles them only on our behalf (as a processor), under Google Cloud's terms. Signing in with Google is Google's own service: your Google account is governed by Google's privacy policy.
• Vercel Inc. (United States): hosts the site; its functions, which read and write your account, run in Paris (European Union). It is under the EU-US Data Privacy Framework. Vercel logs each request (IP address, path, browser and time); the logs we can see last about an hour, and Vercel handles them as a processor under its data processing agreement. Our own logs never include personal data.
• Real Federación Española de Golf: receives the licence you type when you look up your handicap.
• Anthropic PBC (United States), through Vercel AI Gateway: receives the text you type at /search.

International transfers

• Your account is handled in the European Union: the functions run in Paris and the database is in Madrid.
• Vercel and Google are based in the United States. Any access by them from outside the European Union is covered by the EU-US Data Privacy Framework and by the standard contractual clauses in their data processing agreements.
• The text from /search goes to Anthropic, in the United States, through Vercel AI Gateway, with the same safeguards of Vercel's data processing agreement.

How long we keep it

• Your account and handicap: until you delete them. We don't delete inactive accounts.
• Deleting your account removes, at once, your account, your handicap and the link to your Google identifier. We keep no backups of the database, so no copy is left. The anonymous totals don't change, as they aren't yours.
• The session cookie: 90 days at most from your Google sign-in, or until you sign out.
• Vercel's request logs: the ones we can see, about an hour; Vercel keeps them under its data processing agreement.
• The anonymous totals: with no time limit, as they aren't personal data.

Your rights

Under the GDPR and Spain's LOPDGDD, you have the right of access, rectification, erasure, objection, restriction of processing and portability, and to withdraw your consent to the session cookie. This is how you exercise them:

• Access and portability: "Download my data", in your account, gives you a JSON file with everything we keep about you, with notes explaining each item.
• Rectification: change your display name or avatar in your account whenever you like; for your handicap, remove it or look it up again.
• Erasure: "More" › "Delete account" deletes it at once, with your handicap. You can also remove TeesDeSalida's access in your Google account.
• Withdrawing your consent to the session cookie: "Sign out" deletes it from this device and ends your session on all the others.
• Objecting: the totals don't identify you, so they hold nothing of yours to set aside. If you'd still rather not be counted in Vercel's statistics, a content blocker prevents them. To object to anything else, write to the address above.
• Any other right, such as restriction: write to the address above. We answer within a month at most.

As we don't keep your email, a message alone can't tell us which account is yours. The quickest way is to do it yourself: sign in with Google and download or delete your data from your account. If you'd rather write to us, send the "id" in the file from "Download my data". If you think someone saved your handicap using your licence, tell us your first name and handicap index, and we'll delete the records that match.

We make no automated decisions about you and do no profiling.

If you think we haven't handled your data well, you can complain to Spain's supervisory authority, the Agencia Española de Protección de Datos.

What your phone stores

• This device's preferences (language, area…), your saved searches and your favourites, the club pages you open from here (your collection), which tee times you've already seen (to mark the new ones) and copies of the weather, the tournaments and the app so it works offline, in the browser's storage. None of it leaves your phone.
• If you sign in, a copy of your profile, also in the browser's storage, so it shows at once, and a session cookie (called __Secure-tds_session), which keeps you signed in for up to 90 days or until you sign out. Only our server reads it: the page's code can't read it (it is "HttpOnly"). You accept it when you tap "Continue with Google", with the note beside the button, and you can withdraw that consent at any time with "Sign out", which deletes it from this device and ends your session on all the others.
• While you sign in, another cookie (__Secure-tds_oauth) protects the round trip to Google: it is essential for signing in, lasts 10 minutes at most and is deleted when you come back.
• We use no analytics cookies.

Minimum age

You must be at least 14 to create an account (LOPDGDD art. 7). If we learn an account belongs to someone under 14, we delete it.