Privacy Policy

Introduction

SundayBag (“we”, “us”, or “our”) operates the SundayBag golf league management platform. This policy describes what information we collect, how we use it, and how we protect it. By using SundayBag, you agree to this policy.

Information We Collect

• Account information: email address and display name when you sign up
• Golf data: scores, handicap index, league membership, tournament results, and matchup history you enter into the app
• Device information: push notification tokens if you enable notifications on mobile
• Usage data: anonymized page-view and interaction data collected by Vercel Analytics

How We Use Your Information

• Operate the service — generate matchups, calculate handicaps, display standings
• Send push notifications for match reminders and league activity (only if you opt in)
• Authenticate your account and keep it secure
• Improve and debug the app using aggregated, anonymized usage data

Data Storage & Security

All data is stored in a PostgreSQL database hosted by Supabase and protected by Row-Level Security (RLS). This means your league data is only accessible to authenticated members of that league — there are no public leaderboards and no data exposed to non-members. Data is encrypted in transit via TLS and at rest.

Third-Party Services

We use the following third-party services to operate SundayBag:

• Supabase — database, authentication, and server-side logic
• Firebase — push notification delivery for the mobile app
• Vercel — web hosting and anonymized analytics

Each provider has its own privacy policy. We do not share personally identifiable information with any third party beyond what is necessary to operate these services.

Data Sharing

We do not sell, rent, or trade your personal information. Golf data you enter (scores, handicaps, standings) is visible only to other authenticated members of the same league. We do not share individual data with advertisers or data brokers.

Your Rights

You may request access to, correction of, or deletion of your personal data at any time. To delete your account and all associated data, contact us at the email below. We will process requests within 30 days.

Contact

Questions about this policy or requests regarding your data can be sent to brent@lonelysasquatch.com.