Privacy policy

Information Back9 handles

• Round information: display names, player or spectator roles, room codes, course selections, scores, Bingo activity, and related timestamps.
• Anonymous session information: a randomly assigned authentication identifier used to control access to a room. Back9 does not require an account, password, email address, or payment information.
• Course searches: the course name or location you enter and course data returned by OpenGolfAPI.
• Technical information: hosting and security providers may process an IP address, browser and device details, timestamps, request paths, and diagnostic logs.
• Anonymous analytics: page views, referrers, general location, browser, operating system, and device type. Vercel Web Analytics does not use third-party cookies and does not associate these analytics with a named Back9 user.

How the information is used

Back9 uses this information to:

• create rooms and keep scores and Bingo boards synchronized;
• show players who has joined or is watching;
• find golf courses and build scorecards;
• support offline score entry and reconnect interrupted rounds;
• protect the service, apply rate limits, diagnose failures, and understand aggregate usage.

Storage on your device

Back9 stores your display name, anonymous session, and room membership in browser storage. Pending offline score or Bingo changes may be kept in IndexedDB until they synchronize. You can remove this information by clearing site data for back9.app in your browser.

Shareable scorecard images are generated on your device. Back9 does not upload those images as part of the sharing feature.

Service providers

Back9 relies on Supabase for anonymous authentication, database storage, and live room updates; Cloudflare for the application API, security, and operational logs; Vercel for website hosting and anonymous analytics; and OpenGolfAPI for golf course information. These providers may process information in countries outside Canada under their own legal and security obligations.

Sharing

Back9 does not sell or rent personal information and does not use it for behavioural advertising. Information is disclosed to the service providers above only as needed to operate Back9, or when disclosure is required by law or necessary to protect the service and its users.

Anyone with a valid room code may be able to see the display names, scores, Bingo boards, and spectator list for that room. Only share a room code with people you want in the room.

Retention

A room becomes inaccessible 12 hours after it is created. Its database records are scheduled for hard deletion after an additional 12-hour buffer, with cleanup running hourly. Browser storage remains on a device until it is cleared, overwritten, or removed by the browser. Anonymous authentication records, security logs, and aggregate analytics may be kept under the applicable provider settings and legal requirements.

Your choices and requests

You may ask about, challenge, correct, or request deletion of information under Back9’s control. Because Back9 uses anonymous sessions, include the room code and display name involved in the request, but never send an authentication token. You can also stop using Back9 and clear its browser storage at any time.

Security

Back9 uses access controls, short-lived rooms, encrypted connections, and managed service providers to protect information. No online service can guarantee absolute security.

Changes to this policy

This policy may be updated when Back9’s features or data practices change. The effective date at the top of this page will be updated when that happens.

Contact

Privacy questions and requests can be directed to Leonard Lacson through his GitHub profile.