๐ Local-First Architecture โ your scores live on your device (UK, EU & US aligned)
1. Where Your Data Lives
Gosco is a local-first application. Your players, handicaps, scores and course data are stored on your own device and are never written to any analytics platform or advertising system. If you never use a live tournament sync room, no personal data ever leaves your device.
2. Live Tournament Sync Rooms & 72-Hour Retention
When you create or join a live sync room, the names, handicaps and scores of the players in your group are sent to Cloudflare's edge network so other groups in the same tournament can see a combined leaderboard. That room data is:
- isolated per room code;
- automatically deleted approximately 72 hours after the last activity in that room;
- deleted in every case no later than 30 days after the room was created, as a backstop should the usual 72-hour deletion fail, so that no room can persist indefinitely;
- deleted immediately when the Room Master selects Destroy Room.
No backups are retained, and room data is not used for any purpose other than showing the live leaderboard to players in that room. Cloudflare, Inc. acts as our hosting provider. If you use Email Results, a copy is sent to the address you enter via the email provider Resend. If you use Report Bug / Send Feedback, your message, and the email address if you choose to give one, are delivered to us through the form provider Web3Forms.
3. UK & EU GDPR (Data Protection Act 2018)
Our lawful basis for processing room data is legitimate interests (Article 6(1)(f)) โ operating the live leaderboard you asked for. Processing is minimised to what a scorecard needs: name, handicap and scores. We do not collect special category data or location, and we do not profile users or make automated decisions about them. Each installation does generate its own random identifier, which is sent with room data so the room can tell one phone's group from another's and hand scoring over cleanly when a golfer moves phone. It is generated by the app, not read from your hardware, is not linked to you or to any account, and it goes when the room does. Retention is limited to the 72-hour window described above. You may erase room data at any time with Destroy Room; because retention is short, there is normally nothing left to erase after a round.
4. USA & California Consumer Privacy Act (CCPA / CPRA)
Gosco does not sell, share, or monetize any personal information, and does not use it for cross-context behavioural advertising. You retain full control of local device storage at all times.
5. Room Codes & Security
Tournament rooms use 10-character codes drawn from a 32-character unambiguous alphabet, giving roughly 1.1 quadrillion combinations, and repeated room lookups from one connection are rate limited. Please treat a room code as a shared secret rather than a password: anyone who has the code can view that room's leaderboard, so share it only with your playing group. Destroying a room is restricted to the device that created it.