← BackPrivacy Policy
Last updated: 22 June 2026
1. Who we are
Putt for Dough is operated by Paul Fleming, based in Ireland. For the purposes of the EU General Data Protection Regulation (GDPR), Paul Fleming is the data controller.
Contact: admin@puttfordough.app
2. What data we collect
We collect the following personal data when you use Putt for Dough:
- Account data — your name and email address when you register
- Profile data — your handicap index and any profile details you choose to add
- Round & score data — scores, courses played, wager amounts, and game results
- Usage data — pages visited, features used, and device/browser information collected via Google Analytics
- Communications — any messages you send to us by email
3. Why we collect it and our legal basis
We process your data for the following purposes:
- To provide the service (legal basis: contract) — creating your account, recording scores, calculating handicaps, and running tournaments
- To improve the service (legal basis: legitimate interest) — analysing aggregated usage patterns via Google Analytics
- Analytics cookies (legal basis: consent) — Google Analytics cookies are only placed after you give consent via our cookie banner
- To comply with legal obligations (legal basis: legal obligation) — retaining records as required by Irish and EU law
4. Cookies
We use cookies for two purposes:
- Essential cookies — required for login sessions and app functionality. These cannot be disabled.
- Analytics cookies — placed by Google Analytics (GA4) to help us understand how the app is used. These are only set with your consent.
You can withdraw consent at any time by clearing your browser cookies and declining when the cookie banner reappears.
5. Who we share your data with
We do not sell your personal data. We share it only with:
- Google Analytics — anonymised usage data for app improvement (EU data processing agreement in place)
- Vercel — our hosting provider, which processes request data to serve the app
- Prisma / database provider — to store your account and round data securely
6. How long we keep your data
- Account and round data is retained for as long as your account is active
- If you request deletion, we will remove your personal data within 30 days
- Anonymised, aggregated statistics may be retained indefinitely
7. Your rights under GDPR
As an EU resident, you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure — ask us to delete your personal data ("right to be forgotten")
- Restriction — ask us to limit how we process your data
- Portability — receive your data in a structured, machine-readable format
- Object — object to processing based on legitimate interest
- Withdraw consent — withdraw any consent you have given at any time
To exercise any of these rights, contact us at admin@puttfordough.app. We will respond within 30 days.
You also have the right to lodge a complaint with the Irish Data Protection Commission (DPC) at dataprotection.ie.
8. Data security
We store passwords using bcrypt hashing. All data is transmitted over HTTPS. Access to the database is restricted to the application server. We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or destruction.
9. Children
Putt for Dough is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with their data, please contact us and we will delete it promptly.
10. Changes to this policy
We may update this Privacy Policy from time to time. We will notify registered users of material changes by email. The "Last updated" date at the top of this page always reflects the most recent version.