Privacy Policy
SHANKED ("we", "us") makes a golf side-game app and related products. This policy explains what we collect, why, and what you can do about it. It applies to the SHANKED app, shanked.club, and our APIs.
What we collect
- Account information — email address, a display name you choose, and a securely hashed password. We never store your password in readable form.
- Purchase records — what you bought and when. Card details are handled entirely by Stripe; we never see or store them.
- Gameplay data — rounds you play, penalty and reward points, scores, putts, courses you select, and session participation.
- Guest players — if you join a game without an account, we store only the display name you type and a temporary device identifier for the length of that game.
- Technical data — IP address and basic request logs, used for security, rate limiting, and diagnosing faults.
What we don't collect
- We don't collect precise location. Course selection is a search you perform, not GPS tracking.
- We don't use third-party advertising or cross-app tracking.
- We don't sell or rent your personal information.
- Camera access is used only to scan QR codes on retail packs and comp codes. Images are processed on your device and never uploaded.
How we use it
- To run your account, sign you in, and restore your purchases across devices.
- To operate live multiplayer sessions and sync scores between players.
- To keep your season history and unlocked items.
- To send transactional email — verification codes, password resets, and receipts. We do not send marketing email unless you ask us to.
- To detect abuse and protect the service.
Who we share it with
We share only what's required to run the service:
- Stripe — payment processing. Stripe receives your email and payment details directly.
- GolfCourseAPI — course lookups. We send your search text; we do not send who you are.
- Email provider — delivery of verification and reset codes.
- Law enforcement — only where legally required.
Where your data lives
Data is stored on servers we control in the United States. Access is limited to people who need it to operate the service.
How long we keep it
- Account and purchase records — while your account is active, plus any period required for tax and accounting.
- Gameplay and season history — while your account is active, or until you delete it.
- Guest data — discarded after the game ends.
- Logs — a short rolling window for security and troubleshooting.
Your choices
- Access or correct your information — email us and we'll help.
- Delete your account — email us from your account address and we'll remove your account, gameplay history, and unlocks. Purchase records may be retained where the law requires.
- Play as a guest — join games without giving us an email at all.
Depending on where you live you may have additional rights (for example, under the CCPA). We honor these regardless of residency where we reasonably can.
Children
SHANKED is intended for adults and is not directed at children under 13. We don't knowingly collect information from children. If you believe a child has given us information, contact us and we'll delete it.
Security
Passwords are hashed with PBKDF2 and a per-account salt. Traffic is encrypted with TLS. No system is perfectly secure, but we take reasonable measures appropriate to the sensitivity of what we hold.
Changes
If we change this policy materially we'll update the date above and, where appropriate, notify you in the app.
Contact
Questions, requests, or deletion: privacy@shanked.club