Privacy Policy for Tipworthy

Introduction

Welcome to Tipworthy ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our website and services.

Information We Collect

Information You Provide

• Account Information: Email address, username, password (encrypted), and optional profile information
• User Content: Golf tips you save, notes you create, and content you share
• Communications: Feedback and messages you send us

Information Automatically Collected

• Usage Data: Pages visited, features used, time spent on site
• Device Information: Browser type, device type, IP address, operating system
• Cookies: Session cookies for authentication and analytics cookies (with your consent)
• Anonymous Analytics (no cookies): We use Vercel Analytics and PostHog in a cookieless mode to collect anonymous usage data (pageviews, clicks, navigation patterns) without setting persistent identifiers. This data cannot identify you across sessions and is collected by default to help us improve the site.
• Cookie-Based Analytics: Full analytics via Google Analytics and PostHog, which set cookies to track returning visits and link sessions to your account. In the United States and most other regions, these run by default and you can opt out at any time via our Privacy choices page. In the European Economic Area, United Kingdom, and Switzerland, these run only after you opt in.
• Advertising Data (Meta Pixel): We use the Meta (Facebook) Pixel to measure how visitors reach and use our site and to support advertising on Meta platforms. It collects pages visited, actions taken, and device information. If you sign in or sign up, a hashed (irreversibly scrambled) version of your email address may also be sent to Meta to improve ad measurement; your actual email address is never shared. The Meta Pixel follows the same regional rules as our analytics: on by default with opt-out in the United States, opt-in only in the EEA, UK, and Switzerland.
• Session Recordings: PostHog records anonymized session replays of your interactions (clicks, navigation, scrolling) to help us identify usability issues. All form inputs (including text, email, password, and search fields) are masked by default and never recorded. Recordings are not linked to your identity unless you are logged in. You can opt out by declining cookies in the banner.

How We Use Your Information

We use your information to:

• Provide and improve our services
• Maintain your account and authenticate you
• Save your preferences and personalized content
• Send you important updates about our service
• Respond to your inquiries and support requests
• Analyze usage patterns to improve user experience
• Prevent fraud and abuse

Third-Party Services

We use the following third-party services that may collect data:

• Supabase: Database and authentication (privacy policy)
• Vercel: Hosting and analytics (privacy policy)
• Google Analytics: Site usage analytics — on by default in the US with opt-out, opt-in only in the EEA/UK/Switzerland (privacy policy)
• PostHog: Product analytics and session replay — on by default in the US with opt-out, opt-in only in the EEA/UK/Switzerland (privacy policy)
• Cloudflare Turnstile: Bot protection (privacy policy)
• OpenAI: AI-powered features for content analysis (privacy policy)
• Meta (Facebook/Instagram): Embedded content from Instagram and Facebook, plus the Meta Pixel for ad measurement and advertising, which receives site activity and a hashed version of your email address if you sign in (privacy policy)
• Upstash Redis: Caching and session management (privacy policy)

When you interact with embedded content (Instagram Reels, Facebook videos), those platforms may collect data according to their own privacy policies.

Cookies and Tracking

We use cookies for:

• Essential Cookies: Required for authentication and basic functionality (always active)
• Analytics Cookies: To understand site usage, link returning visits, and record anonymized session replays
• Advertising Cookies and Pixels: The Meta Pixel, used to measure ad performance and build advertising audiences on Meta platforms

Whether analytics and advertising tracking runs depends on where you are. In the United States and most other regions, it is on by default, and you can opt out at any time via our Privacy choices page or the cookie banner. In the European Economic Area, United Kingdom, and Switzerland, it runs only if you opt in, and you can withdraw that consent at any time in the same places.

We also collect cookieless anonymous analytics by default (Vercel Analytics and PostHog in memory-only mode). This does not set cookies or persistent identifiers and cannot track you across sessions. Opting out disables Google Analytics, the Meta Pixel, and PostHog session replay, but anonymous analytics continues to operate.

Data Sharing

We do not sell your personal data. We may share your information:

• With service providers who help us operate the site (Supabase, Vercel, etc.)
• With advertising partners: we share site activity and a hashed version of your email address with Meta for ad measurement and advertising, as described above. Some state laws treat this as "sharing" for cross-context behavioral advertising; you can opt out via our Privacy choices page
• When required by law or to protect our rights
• With your consent or at your direction

Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and data
• Export your data
• Opt out of analytics cookies
• Withdraw consent at any time

To exercise these rights, contact us at legal@tipworthygolf.com or through your account settings.

Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Encrypted passwords
• Secure HTTPS connections
• Regular security updates
• Access controls and authentication

However, no internet transmission is 100% secure. Use strong passwords and keep your account secure.

Data Retention

We retain your data as long as your account is active or as needed to provide services. You can delete your account at any time, and we will delete or anonymize your data within 30 days, except where we're required to retain it by law.

Children's Privacy

Tipworthy is not intended for users under 13 years of age. We do not knowingly collect information from children under 13. If you believe we have collected information from a child under 13, contact us immediately.

International Users

Your data may be stored and processed in the United States or other countries where our service providers operate. By using Tipworthy, you consent to the transfer of your data to these locations.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last Updated" date.

Contact Us

If you have questions about this privacy policy or our data practices:

• Email: legal@tipworthygolf.com
• Address: PO Box 464, New Providence, NJ 07974