The short version
Cardhouse stores the minimum needed to run a golf pool. Participants never create an account. Nothing is sold, and there is no advertising or cross-site tracking.
What we collect from commissioners
An email address, required to sign in. If you sign in with Google or Apple, we also receive the display name and avatar that provider gives us, plus a Stripe customer reference if you buy a Season Pass. Sign-in works by emailed magic link or by a linked Google or Apple account. Cardhouse never receives your Google or Apple password.
What we collect from participants
A team name, an optional owner name, an optional email address, and your golfer picks. The email address, when you give one, exists so we can send your pick confirmation and let you recover your edit link later. Participants have no account and no password; access runs on a single-use edit token in a link.
Email verification
When you join a pool with an email address, we send a one-time verification link. The verification token is separate from your edit token and is cleared the first time it is used.
Tournament data
Golfer names, scores, and tee times come from ESPN's public endpoints. Requests go out to ESPN; no information about you goes with them.
Who we share data with
Vercel (hosting and aggregate, cookieless page analytics), Turso (database), Resend (transactional email only), Stripe (payments; Cardhouse never sees or stores your card number), and Sentry (error monitoring, with session replay disabled). No one else, and we do not sell data.
How long we keep it
Pool data lives as long as the pool does. Deleting a pool removes its teams, picks, and emails from the leaderboard and dashboards. Commissioner accounts persist until deletion is requested.
Your choices
Email support@cardhouse.golf to see, correct, or delete what we hold. Include the pool name and the email address you used.
Changes and contact
We update this page when the product changes; the date at the top is the last revision. Questions go to support@cardhouse.golf.