Privacy Policy

The19th, LLC (“The 19th,” “we,” “us,” or “our”) operates the website at the19th.com and the related platform (collectively, the “Service”). We built The 19th to grow the game of golf — to connect golfers, support societies, and give every member a richer experience of the game. To do that well, we need to handle some information about you. This Privacy Policy explains what we collect, why we collect it, and the choices you have.

By using the Service, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.

1. Information We Collect

Information you provide directly

• Account information: your name, email address, and password (stored as a one-way hash). If you sign in with Google, we receive your name, email, and profile photo from Google.
• Profile information: biography, profile and cover photos, home city, home state, ZIP code, club affiliations, golf preferences, and other details you choose to share.
• Golf identity: your GHIN number, self-reported handicap index, and any verification screenshots you upload. Your GHIN number is private and is never shown to other members.
• Home address: street, city, state, and ZIP. Your full street address is shared only with admins of societies you join; your city and state may be shown publicly per your privacy settings.
• Content you create: posts, comments, photos, direct messages, course reviews, scores, tee-time and round details, society newsletters, message-board threads, and any other content you submit to the Service.
• Society and payment data: memberships, invoices, dues, and payment history. Payments are processed by Stripe, Inc.; we receive transaction metadata but do not store full card numbers.
• Communications: messages you send us through support, contact forms, or email.

Information collected automatically

• Device and usage data: IP address, browser type, operating system, referring URL, pages viewed, features used, and timestamps.
• Performance data: aggregate analytics and Web Vitals collected by Vercel Analytics and Vercel Speed Insights.
• Cookies and similar technologies: session cookies for authentication, a site-access cookie during private preview, and locally stored tokens necessary for the Service to function. We do not use third-party advertising cookies.

Information from third parties

• Authentication providers (e.g., Google) when you choose to sign in through them.
• Stripe, when you make a payment, to confirm the transaction succeeded.
• Public golf-course data sources we use to populate course information; this is not personal information about you.

2. How We Use Information

• To create and maintain your account and profile.
• To operate the Service: connect you with other members, route concierge requests, run societies, send invoices, deliver newsletters, and surface relevant courses and events.
• To process payments through Stripe.
• To enforce per-field privacy settings — for example, sharing your handicap only with co-members of a society if you choose “societies”.
• To send transactional emails (sign-in links, invoices, society notifications) and, where you opt in, marketing or product-update emails.
• To verify GHIN handicaps you submit and respond to your support requests.
• To detect, investigate, and prevent fraud, abuse, and security incidents.
• To improve the Service, fix bugs, and develop new features.
• To comply with legal obligations and enforce our Terms of Service.

3. How Information Is Shared

We do not sell your personal information. We share information only in the following circumstances:

• With other members, according to your privacy settings. You control who can see each profile field — public, members of your societies, your connections, both, or no one.
• With society admins. When you join a society, its admins can see information necessary to administer your membership, including your full home address for invoicing and event logistics.
• With service providers who help us run the Service under contract — including Supabase (database and storage), Vercel (hosting and analytics), Stripe (payments), and our transactional email provider. These providers may access only the information needed to perform their services.
• For legal reasons. We may disclose information if required by law, subpoena, or other legal process, or if we believe disclosure is necessary to protect the rights, property, or safety of The 19th, our members, or the public.
• In a business transaction. If we are involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you and continue to honor this Privacy Policy.

4. Your Privacy Controls

You can update most of your information at any time from your profile settings. The Service includes per-field privacy controls with the following options: public, societies, connections, societies and connections, and nobody. You can preview how your profile appears to each audience using the “View Published Profile” perspective switcher.

You may also:

• Request a copy of the personal information we hold about you;
• Ask us to correct information that is inaccurate;
• Ask us to delete your account and associated personal data, subject to limited retention required by law or for legitimate business reasons (such as fraud prevention or accounting);
• Opt out of marketing emails by clicking the unsubscribe link in any marketing message — note that transactional emails (e.g., invoices, security notices) cannot be turned off while your account is active.

To exercise any of these rights, email us at legal@the19th.com. We will respond within a reasonable time and may need to verify your identity before acting on the request.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. After account deletion, we remove personal data within a reasonable period, except where we are required to retain it for legal, tax, accounting, or fraud-prevention purposes. Content you posted publicly (such as comments on shared posts) may remain visible after your account is deleted, although it will no longer be associated with an active profile.

6. Security

We use industry-standard safeguards — encrypted connections, password hashing, role-based database access, and security monitoring — to protect your information. No system is perfectly secure, however, and we cannot guarantee that information will never be accessed without authorization. If we become aware of a security incident affecting your data, we will notify you in accordance with applicable law.

7. Children

The Service is intended for adults who can enter into a binding agreement. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal information, please contact us at legal@the19th.com and we will delete it.

8. International Users

The Service is operated from the United States. If you access it from elsewhere, your information will be transferred to and processed in the United States, which may have data-protection laws different from those of your country.

9. Third-Party Links and Integrations

The Service may link to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of those parties. We encourage you to review their privacy policies before using them.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the Service or by email. The date at the top of this policy reflects when it was last updated. Your continued use of the Service after the update means you accept the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please reach us at:

The19th, LLC
Email: legal@the19th.com