Privacy
Last updated 11 October 2026. Written to be read, not to be survived.
The short version
Swindl. holds your name, your email address and your golf. Nothing else — no address, no phone number, no card details, no location, and nothing about your health. We don’t track you, and we never sell or pass on your details. We only email you news or offers if you have asked us to.
If your group subscribes
Payment is taken by Stripe on Stripe’s own pages. We never see or store card details. We hold Stripe’s customer and subscription ids for the group, the plan, and the dates it started and renews, so the group gets what it paid for. Stripe’s own privacy notice covers what Stripe holds.
What we hold, and why
| What | Why | Our lawful basis |
|---|---|---|
| Your name | So your club knows who’s playing and whose score is whose | Legitimate interests — running the golf |
| Your email address | To send the 6-digit code you sign in with, and a note if you come off a waitlist or an organiser links your name to this address | Contract — you can’t sign in without it |
| Your email address, only if you tick the box | Occasional news about Swindl. and golf offers from us and from partners such as golf clubs and golf-break companies. We send them ourselves; your address is never given to a partner or anyone else | Consent — off unless you turn it on, and you can turn it off at any time under Settings → Emails. We keep the date you said yes |
| Your scores, handicap, winnings and running total | It’s the point of the product | Legitimate interests — running the golf |
| Who did what, and when | So a disputed score or a removed name can be traced to a person, rather than argued about | Legitimate interests — fairness |
Not consent for the golf itself, deliberately. Consent can be withdrawn, and a leaderboard that loses a player halfway through a season stops being true for everybody else in it. Legitimate interests carries an obligation instead: we have to keep what we do proportionate, and you can object — see below.
Who sees it
- Your club or society. Its organisers see its own roster, tee sheets and results. They cannot see any other club’s.
- Anyone with the event link. Tee sheets and leaderboards open without an account, on purpose — that’s how a swindle has always worked, on a noticeboard. Your email address is never on them.
- Us, when a club asks for help, and it’s written into that club’s audit log when we do.
- Our suppliers: Render (hosting, UK/EU), Amazon Web Services (Amazon SES) (the sign-in emails), Cloudflare R2 (encrypted backups), Sentry (error reports). No one else, and none of them advertise.
- YouTube, only if you press play on one of the films on our front page. Your browser then fetches the video from YouTube, which sees your IP address as it would anywhere. It never sees anything you’ve given Swindl.
How long we keep it
For as long as your club or society uses Swindl. That isn’t evasion — a season’s order of merit is worth having because it goes back years. Sign-in codes stop working after 10 minutes and are deleted after 24 hours — long enough to look into a code that never arrived. If a club leaves, its data is deleted within 90 days.
Getting yourself removed
Ask your organiser, or email us. Your name, your email address and your account are removed, permanently.
Your scores stay, with your name taken off them. Eleven other people played in that competition and their positions depend on the field being what it was — take you out and you change their results too. Once a record can’t identify anybody it isn’t personal data any more, which is why this is the honest answer rather than a way round the question.
Your other rights
You can ask for a copy of what we hold, ask us to correct it, ask us to stop, or complain to the Information Commissioner. Ask us first if you can — most of it an organiser can fix in a minute.
Cookies
Four, all of them doing a job you asked for, none of them watching you. The full list.
Children
Swindl. isn’t designed for under-16s. If a junior member plays in your swindle, their parent should set the account up.
Who we are
Swindl. is run from the United Kingdom. For your club’s member data your club is the data controller and we act on its instructions; for your account and our billing, we are. Contact: privacy@swindl.golf.