Privacy Policy
Last updated: May 2026
This page explains what SwingStakes ("we", "us") collects, how we use it, and the choices you have.
Information we collect
- Account info: email address, display name, username, optional handicap, optional bio, optional home course, optional avatar image. Authentication is handled by Supabase Auth — passwords are hashed (we never see plaintext), or you can sign in with Apple or Google (we receive only the ID token and basic profile fields the provider returns).
- Gameplay data: rounds you play, hole-by-hole scores, the games you configure (Wolf, Skins, Nassau, etc.), per-hole stakes amounts you set, and the round summary. SwingStakes is a digital scorecard — we do not process payments. Stakes amounts are numbers users track between friends and settle outside the app.
- Social connections: friend requests, friendships, group memberships, and any blocks you create against other users.
- Avatar uploads: profile pictures you upload are stored in Supabase Storage under the
avatars bucket, keyed by your user ID.
- Push notification tokens: if you opt in to push notifications, your browser/device push endpoint and encryption keys are stored in the
push_subscriptions table so we can deliver notifications you've enabled.
- Reports you file: if you report another user or content via the in-app Report flow, we record your user ID, the reported user/content, and the reason in the
content_reports table for moderation review.
- Device info: basic browser/device metadata (user agent, app version) for error logs and stability analytics.
How we use it
- To run your rounds, track stats, unlock achievements, and surface leaderboards.
- To deliver push notifications you opt into (friend requests, round invites, round recaps, achievement unlocks).
- To enforce community safety (review and act on reports, honor blocks).
- To improve the product: debugging errors, understanding usage, shipping new features.
What we don't do
- We don't sell your data, ever.
- We don't process real-money wagers. SwingStakes never handles money; settlement between friends happens outside the app.
- We don't share your gameplay with anyone outside the friends and groups you chose.
- We don't track you across other apps or websites.
Storage & security
Data is stored by Supabase (Postgres + Storage) with row-level security. Passwords are hashed; we never see or store them in plain text. Push endpoints and report records are restricted by RLS so only you can see your own data, and only our moderation team can read aggregated reports.
Your controls
- Edit your profile, display name, handicap, bio, and tone setting any time in Settings.
- Toggle each notification category independently in Settings → Notifications.
- Privacy: make your full profile visible only to friends (Settings → Privacy → Private profile), or hide individual stats/handicap/rounds/badges/friends list.
- Block users in their profile via the “···” menu → Block. Manage blocked users in Settings → Safety → Blocked users.
- Delete your account in Settings → Account → Delete account. Your auth record, profile fields (display name, email, avatar, handicap, bio, home course), push subscriptions, blocks, friend connections, group memberships, and notifications are permanently deleted. Your scores in rounds shared with other players remain in those rounds’ history but show as “Deleted User” so other participants’ round records stay intact.
Children
SwingStakes is intended for users 18 and older. We do not knowingly collect data from anyone under 18. If we learn we've collected data from a minor, we will delete it promptly.
Contact
Questions? Email swingstakes@gmail.com.
← Back to app