Privacy Policy

Golfo never requires an account to play, sets no cookies, and does no ad tracking. We count anonymous gameplay events so we know whether the game is any good, your play stats live on your own device, and if you choose to sign in we store only what Google provides plus your scores.

Playing never asks for your name, email address, or any other personal details. We do not use advertising trackers, cross-site tracking, or fingerprinting, and we do not sell or share data with data brokers.

You can sign in with Google to keep a scorecard that outlives your device. If you do, we store the name, email address, and profile photo Google shares, plus the rounds you save. Your account data stays in our own database and is never sold or shared. Playing the game never requires signing in.

Finishing the daily hole places your score in that day's rankings so we can tell you how you compared. If you are signed in, the entry belongs to your account. If not, your browser stores a randomly generated identifier and sends it with your score so you are counted once per day. It is a random number, not a fingerprint: it says nothing about you or your device, and clearing your browser data removes it.

We use PostHog in cookieless mode to count gameplay events — for example, how many holes were started or completed and how many share links were copied. Nothing is stored on your device for analytics: no cookies, no local identifiers. To count unique players, PostHog derives a short-lived, non-reversible hash on its servers; it cannot be used to identify you or follow you across other websites.

Your streak and total holes completed are stored in your browser's localStorage, on your device only. They are never uploaded together with any identity — clearing your browser data resets them.

When you share a challenge link, the link contains only the hole's seed number, your stroke count, and how long your round took — nothing about you or your device. If you are signed in, the link also carries a random code naming your saved round; it is a random number, not an account identifier. Anyone you send it to sees the score to beat, not who set it (unless you tell them).

When two signed-in players finish each other's links, we record the result so you can rematch from inside the game without sending a new link. Your rival then sees the name and profile photo from your Google account on their scorecard, along with your scores in those challenges — and you see theirs.

Golfo is served by Cloudflare. Like any web host, Cloudflare processes IP addresses in transit and may keep standard, short-lived security and performance logs. See Cloudflare's own privacy policy for details on how it handles that traffic.

Golfo is suitable for all ages, and because we collect no personal information from anyone, we collect none from children either.

If we change how the game handles data, we will update this page and the date at the top before those changes take effect.

Questions about privacy? Reach us at hello@playgolfo.com.