Privacy

What stays on your device

Saves, autosaves, settings, the display name you choose and your tutorial progress are kept in your browser (IndexedDB and local storage). They are not uploaded unless you sign in to an account (see below). If you clear your browser data they are gone, which is why the game offers to export a backup file.

Accounts and cloud saves (only if you sign in)

You never need an account to play. If you create one, so you can continue a game on another device, we store the email address you sign up with (or the one your Google account shares with us), a password that only the sign-in service can check (we never see or store it in readable form), and the saves you choose to keep in the cloud: the save file, its name, a small picture of the course and its day number. Only you can read, change or delete your saves. The account also keeps one copy of your pro (name, look, stats, level, results, and the streak freezes and colours you have earned) so the same pro can play every course.

While you are signed in, the game saves the game you are playing to the cloud when you save, every few minutes and when you leave the page. You can switch that off in Account, delete any cloud save there, or delete your account, which removes the account and every cloud save at once. Games on your own devices are not touched.

Listing a course in the public Gallery needs an account. The listing records which account made it, so you can remove it from any device and we can limit how many you add; your account email is never shown. Deleting your account removes your Gallery courses too. If you play ranked rounds or the Daily Open, the public name you choose, your pro’s name and level, your scores and the shots of each round (so the round can be checked) are stored, and the name, pro and score appear on that course’s (or that day’s) leaderboard.

Signing in with Google sends you to Google to approve it, and we receive only your email address. Accounts are provided by Supabase. Your email is used only to sign you in and to send the sign-up and password-reset emails you ask for. It is never sold or used for marketing.

Anonymous usage data and crash reports (only if you say yes)

The first time you play, the game asks whether to share anonymous usage data and crash reports. It is off until you say yes, and you can change your mind any time in Settings. If it is off, nothing is sent and no identifier is created.

If you say yes, the game sends:

• a random install id, made on your device and not derived from anything about you, so we can tell a returning player from a new one
• a random id for the visit, the version of the game, and the screen layout (phone, tablet or desktop)
• milestones such as “built a first hole”, “finished the tutorial” or “finished a game day”, and simple numbers such as the day reached
• crash reports: the error message and the top few lines of the stack, with web addresses and anything after a # or ? removed

It never sends:

• course, hole, player or pro names, or any save data
• the text of share links (a share link contains a whole course; it is stripped from everything the game reports)
• your IP address (the server keeps only a one-way hash for rate limiting, which is how it stops one device flooding it)

This data is used only to fix bugs and see where new players get stuck. Rows are deleted after 90 days. It is never sold or shared for advertising.

Page speed and visit counts

The game page uses Vercel Speed Insights to measure how fast it loads on real devices. It records load and interaction timings, the page path and broad device information such as browser and country. It uses no cookies and does not identify you. The game page also uses Vercel Web Analytics to count visits and page views: it uses no cookies, stores nothing on your device, and the address it reports never includes the part after a ? or # (a shared course link carries a whole course there, which never leaves your browser). The landing page loads no scripts.

Sharing a course

A share link that starts with # keeps the whole course inside the link itself and sends nothing to us. If you choose “Get short link”, the course file, its name and the author name you entered are stored on our server so the short link can open it. Anyone with a short link can open that course.

Listing a course in the public Gallery is a separate, unticked choice and makes the course public: its name, your author name, a map and its statistics are shown to everyone. A secret token kept on your device lets you remove it later. Anyone can report a course; reported courses are reviewed and can be removed.

Shared courses are checked against a list of offensive words before they are accepted and again when they are opened.

Building together (co-op) and friends

A co-op room is a live connection through our Supabase service, named by a random code. While you are in a room, what you do there (your building commands, chat messages, your name and where your cursor is) is passed to the other players in it, and the host sends them a copy of the course. It is relayed, not stored by us. Anyone who has the room code can ask to join, and the host decides what is accepted.

Your friend list, your block list and your friend code are kept on your device. If you sign in to an account, one copy (the code, the saved friends with the names you gave them, and the blocked codes) is also kept with your account so it is the same on your other devices; only you can read it, and deleting your account deletes it. Signed out, nothing is sent. Your friend code is a random code made on your device; it is shown to the other players in a room you join, so they can save you. Asking a friend to join their room sends them your name and friend code, and they get a popup to accept or decline. We do not keep a list of players, and nobody else can see your friends.

Online status: while the game is open, and unless you switch it off in Friends, your device joins a presence channel named after your friend code, so friends who have your code can see a green dot. It says only that you are in the game: no name, no room, nothing else, and nothing is stored. When you save a friend by their code, your device also sends that friend’s presence channel a one-time note with your name and friend code, so they can add you back; it is delivered only if they are online and is not stored. A friend’s dot is read the same way, only while your Friends window is open.

Feedback

The Feedback button sends what you type, the optional email address you choose to add so we can reply, any screenshots you choose to attach in the game (shrunk, and sent by email only: they are not stored on our servers), and which page you were on. A copy is stored, emailed to us and filed as an issue in our private project tracker. It is used only to read and answer feedback, and the email address is never used for anything else.

Hosting

The site is hosted by Vercel and the sharing service runs on Supabase. Like any web host, they handle ordinary request information (such as IP address and browser) in their server logs to deliver the site. We do not use it to identify players.

Your choices

• Turn sharing of usage data off in Settings → Anonymous usage data.
• Delete your account and cloud saves in Account (in the game menu).
• Delete your saves and settings by clearing this site’s data in your browser.
• To have a shared course removed, or to ask anything about this page, use the Feedback button on any page.