Privacy Policy

Your account. Your email address, which is how you sign in (we email you a sign-in link; there is no password). That you confirmed you are 18 or older and accepted the Terms, and when.

Your player profile. The display name you choose and, if you add one, a short bio. If you answer it, where you stand today (new, casual, league or tournament player) or a self-reported PDGA number and rough PDGA rating. We do not ask where you live or where you usually play, and your profile never shows it.

Your match requests. When you ask for a match: when you can play, ranked or casual, singles or doubles, how far you will travel, the lengths and formats you accept, your time zone, and a location to search around. That location is either a course you pick, or — if you allow it — your phone's position, which the app rounds to about 1 km (0.6 mi) before it leaves your phone. We use it to find opponents and a course for that request; to start your next search from the same place unless you change it; and, without showing it to anyone, to count how many players look for matches in an area — which other players see only as a rounded number of 5 or more. We never track your location in the background or between requests.

Your matches. Offers made to you and whether you accepted, the matches you agree to (course, layout, time, format), "on my way" and "I'm here" updates you send, results and scorecards you report or confirm, disputes, no-show claims, and the rating and Level that follow.

Safety. Players you block, reports you make or that are made about you, and the commissioner's decisions on them.

Your phone number, if you add one. Only to text you about your matches, and only after you prove it is yours with a code.

Junior profiles you run. The junior's display name and birth year, and your confirmation that you are their parent or guardian (see section 9).

Venues. Courses you add or report a problem with.

Technical information. Our servers and hosting provider record ordinary request logs (such as IP address, browser type and time) to run and protect the service. We record usage events — for example "a request was created" or "an offer was accepted" — to see whether matchmaking works; some carry an internal ID for a player, request or match, and none carry your name, email, phone or location.

What we don't collect. No contacts, no payment details, no advertising IDs, no continuous or background location, no messages between players (Alludio has no chat), and no third-party advertising or tracking code on our pages.

We use your information to:

• run your account and sign you in, and find you a match: pair your request with compatible ones, choose a course everyone can reach, check daylight and schedule conflicts, and send the offer;
• help you meet: the meet card, the match word, status updates and reminders;
• record results and keep ratings, Levels, the ladder and reliability fair and accurate;
• keep players safe: blocks, reports, no-show claims, disputes, suspensions, and stopping abuse and cheating;
• understand and improve matchmaking from aggregate usage (for example, how many requests become completed matches);
• contact you about your account and these documents;
• meet legal obligations and enforce our Terms.

If you are in the European Economic Area, the United Kingdom or Switzerland, our legal bases are: contract (to provide the service you signed up for — account, matchmaking, matches, results, ratings and messages about them); legitimate interests (safety, fair play, keeping finished matches in other players' records, improving matchmaking, protecting the service) — you can object, see section 8; consent (using your phone's location, and text messages), which you can withdraw at any time; and legal obligation.

You don't have to give us anything beyond your email, display name and age confirmation, but without a location we can't find you a match, and without a phone number we can't text you.

Automated decisions. Ratings, Levels, the ladder, reliability and pairing are calculated automatically from match results and requests. They decide who you are offered and how you are ranked, not anything with legal or similarly significant effects. You can dispute any result, and disputes and reports are decided by a person (the commissioner). How ratings work is explained on the Levels and community rules pages.

Any signed-in player can see your display name, bio, Level, ladder position, whether you are still provisional, and a few activity figures shown in rough bands (never exact small numbers). They do not see your match history, your opponents, where or when you played, your record or your rating history — only matches you played against them.

A player you are offered or matched with also sees, for that match: the course and layout, the time, the format, your reliability band, the match word, and the "on my way" and "I'm here" updates you send — and, if a junior is playing, that a guardian attends.

Nobody else ever sees your email, phone number, the location you searched from, your search times, who you blocked or reported, or whether you turned down an offer. A declined offer simply ends for the other player, as if it had timed out.

Outside Alludio, nothing about you is public. The public scoreboard, if it is ever switched on, is opt-in and off by default, and publishes a match only if everyone who played it opted in (see the community rules).

We do not sell your personal information, and we do not share it for targeted advertising. We share it only with:

• Service providers who run parts of Alludio for us under contract and may use it only for that: Supabase (database and sign-in), Vercel (hosting), Resend (email) and Twilio (text messages).
• Other players, only as described in section 3.
• Authorities or others when the law requires it, or when we believe in good faith it is needed to protect someone's safety, investigate abuse, or enforce our Terms.
• A successor, if Alludio is merged, acquired or transferred; this policy would continue to apply to your information, and we would tell you first.

Text messages: your mobile number and your consent to receive texts are never shared with or sold to third parties or affiliates for their marketing or promotional purposes. Twilio receives your number only to deliver our messages.

Our database and servers are in the United States (Northern Virginia), and our providers may process information in other countries. If you are outside the United States, your information is transferred there. Where the law requires it — for example from the European Economic Area, the United Kingdom or Switzerland — those transfers rely on our providers' data processing agreements and the European Commission's Standard Contractual Clauses (and the UK and Swiss equivalents), or on the EU–U.S. Data Privacy Framework where a provider is certified.

• Your account and profile: until you delete your account.
• The location of a match request: as you gave it while the request is live and for 30 days after it ends (in case a match it led to is disputed or reported), then reduced automatically to the nearest 0.1° — about 10 km (6 mi).
• Finished matches, results and ratings: as long as Alludio runs, because your opponents' ratings were calculated from them. If you delete your account they stay under "Deleted member", not your name.
• Notifications we sent you: 180 days.
• Usage events: 24 months.
• Phone codes: 10 minutes. Records that let a result sent twice count once: 7 days.
• Safety records (blocks, reports, suspensions and the commissioner's decisions): as long as they are needed to protect players, enforce our Terms or meet legal obligations.
• Server logs and backups: for the shorter periods our hosting providers keep them.

Information travels encrypted (HTTPS) and is stored with our providers. Inside Alludio, database rules let each player read only what this policy says they can, and match records can be changed only through the server. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.

• See and download your data: Your data → Download my data gives you a machine-readable copy.
• Correct it: edit your profile on your account page; dispute a wrong result on the match page.
• Delete your account: Your data → Delete my account. Your name, email, phone, requests, settings, notifications and the junior profiles you run are removed or anonymised at once; finished matches stay in your opponents' records under "Deleted member".
• Location: you can refuse location permission and pick a course instead.
• Texts: reply STOP to any text, or turn texts off on the notifications page. Email notices can be turned off there too; messages you need to use the service (like sign-in links) still come.

Depending on where you live, you may also have the right to object to or restrict how we use your information, to withdraw consent, and to ask us to confirm what we hold. Residents of US states with privacy laws (such as California) have the rights those laws give, and we will not treat you differently for using them. To use any right, write to support@alludio.golf from your account email; we answer within one month. If you are in the EEA, UK or Switzerland you can also complain to your data protection authority.

Accounts are for adults: you must be 18 or older to sign up. A player aged 13 to 17 can compete only through a junior profile run by their parent or guardian from the guardian's own account. The junior has no account, email or phone of their own; every notice goes to the guardian, and the guardian must attend each match and check in before a result can be reported.

For a junior profile we keep the display name the guardian chooses, the birth year (used only to confirm the junior is 13–17 and to know when the profile can be handed over at 18), and their matches and rating. Other players see the junior like any player, plus a note that a guardian attends; they never see the birth year. A guardian can download a junior's information (while playing as them) or remove the profile at any time from the junior players page.

Junior profiles for children under 13 are not available. We do not knowingly collect personal information from children under 13; if you believe we have, write to support@alludio.golf and we will delete it.

We use only what the service needs; there are no advertising or analytics cookies.

• Sign-in cookies keep you signed in.
• A cookie remembers, for up to 12 hours, when a guardian has chosen to play as a junior.
• Browser storage keeps a result you entered without signal until it can be sent (at most 7 days), and a draft of a scorecard while you type it.
• A service worker keeps a copy of match pages you opened, so the meet card works at a course with no signal.

Signing out clears the saved results, drafts and match pages from that device.

Course and venue details come largely from OpenStreetMap (© OpenStreetMap contributors, available under the Open Database License) and from players. Course information is about places, not people; we never send your information to OpenStreetMap.

If we change this policy we will update the version and date at the top. If a change matters to how your information is used, we will tell you in the app or by email before it takes effect.

David Molinari, doing business as Alludio · support@alludio.golf