PROMPT GOLF
./privacy

Effective 31 July 2026

PRIVACY POLICY

What we store

Prompt Golf stores the display name and email address you provide, a one-way password hash, game scores and progress, prompts and AI responses, any round ideas or votes you submit, and your course-notification preference. We also keep short-lived password-reset token hashes and security/rate-limit records.

We do not collect phone numbers, store plaintext passwords, sell personal information, or use your data for advertising.

Public game information

Your display name, completed rounds, and scores appear on the public leaderboard. Players who have cleared the same rounds may view the associated gameplay transcripts as described in the game.

Analytics and service providers

We use Google Analytics 4 for basic usage measurement, such as page visits, device/browser information, referrers, and approximate location. Advertising and Google Signals are disabled in our configuration. Google may process analytics identifiers and cookies under its own privacy terms.

Google reCAPTCHA helps prevent automated abuse. Azure OpenAI processes gameplay prompts and responses. Our SMTP provider processes email addresses to deliver password-reset messages and requested course-availability notifications. These providers process data under their own terms.

How we use and retain data

We use data to operate accounts, run the game and leaderboard, prevent abuse, recover accounts, diagnose failures, understand basic product usage, and send a Course 2 availability email only when you explicitly request it. Data is retained while needed to provide the service, maintain game integrity, honor your notification choice, or meet legal and security obligations.

Your choices

You can avoid Google Analytics using browser privacy controls or an analytics blocker. Course notifications are opt-in; you may withdraw that request, or request access to or deletion of your account data, by contacting the operator at [email protected].

Security and changes

We use password hashing, CSRF protection, restricted sessions, and rate limits, but no online service can guarantee absolute security. We may update this policy as the service changes and will revise the effective date above.

← Back to Lobby