Privacy policy
Last updated 10 September 2026
Skullaroo is a scoreboard for a golf group that already knows each other. It needs your phone number so you can sign in, and your name and scores so the leaderboard means anything. That is very nearly the whole list.
We do not sell your data. We do not run ads. There is no analytics, no advertising identifier, and no cross-app or cross-site tracking of any kind in this app. The one thing the app does report is a crash, with your phone number stripped out first — see when the app crashes.
Who we are
Skullaroo is operated by Skullaroo LLC ("we", "us"). You can reach us about anything on this page at [email protected].
What we collect
| What | Why |
|---|---|
| Mobile phone number | It is your account. We text you a six-digit code to sign in — there is no password. It is also how a group organiser invites you. |
| First and last name | So the leaderboard, the scorecard and the settle-up list say who you are. |
| Golf data | Your handicap index, the tee you played, your score on each hole, and the results that follow from them — skins, greenies, chippies, standings, and who owes whom. |
| Group membership | Which groups you belong to and whether you help run one. |
| A sign-in token | Kept in the iOS Keychain on your device so you stay signed in. |
We do not ask for your address, your date of birth, your email, your location, or any payment details. The app does not use the device's location services at all.
Your contacts
The app does not ask for your contacts and cannot read them. A golfer is added to a roster by typing their name and number. There is no contacts permission in the app at all.
Money
Skullaroo tracks bets as IOUs — numbers that golfers settle between themselves, in person. The app does not move money, does not connect to your bank, and does not process card payments. There is no payment information for us to hold.
Who else sees it
Other members of your group see your name, your scores, your handicap index and your standings. That is the point of a shared leaderboard. Nobody outside your group sees any of it.
Beyond that, we use a small number of service providers. They may only act on our instructions, and none of them may use your data for their own purposes.
| Provider | What reaches them |
|---|---|
| Cloudflare | Hosts the service and serves this page. All traffic passes through it. |
| Database hosting | A managed PostgreSQL provider stores everything listed above, encrypted in transit. |
| Twilio | Your phone number, to deliver a sign-in code or a group invitation by SMS. |
| Anthropic | See "The Booth" below. Only if your group has that feature switched on. |
| Sentry | Crash reports, if the app stops unexpectedly. See "When the app crashes" below. |
When the app crashes
If Skullaroo stops unexpectedly, it sends a crash report to Sentry so we can find the bug. A report describes what the app was doing when it broke, along with an internal account number that lets us tell one person's repeated crash from several unrelated ones.
It does not contain your phone number. Your phone number is how you sign in, so it is the one thing we treat as off-limits: phone numbers, sign-in codes and access tokens are stripped out of every report before it leaves your phone. We do not use Sentry for analytics, we do not record your screen, and the app carries no advertising or tracking identifier of any kind.
The Booth, and AI-written commentary
A group can switch on The Booth, which writes a line of live commentary when the lead changes or someone makes a birdie, and Heckles, which needles one chosen player. Those lines are written by a large language model operated by Anthropic.
When one of these fires, we send Anthropic the facts of the moment: a player's last name, the hole, the score they made relative to par, their position and total, and the money at stake. For a heckle, we also send any free-text notes the group's organiser wrote about the person being heckled. We do not send phone numbers, account identifiers, handicap indexes, or anything about anyone who is not part of that moment.
This data is sent for the sole purpose of generating that one line of commentary. Under our agreement with Anthropic it is not used to train their models. If your group does not want any of this leaving the app, a manager can switch The Booth and Heckles off in the tournament's settings, and nothing will be sent.
When we would hand data over
We will disclose data if the law genuinely requires it, and to protect someone's safety or our rights. If the service is ever sold or merged, your data may transfer with it; you would be told before that took effect. There are no other circumstances in which we share it.
How long we keep it
- While your account exists: your group's history is the product. Scores and standings from past tournaments stay until the group or you delete them.
- Sign-in codes: minutes. They expire almost immediately and are then discarded.
- After you delete your account: your personal details — name, phone number, handicap — are removed within 30 days, including from backups as they roll over.
One honest caveat. A finalised tournament is a shared record: other people's payouts were calculated against your score that day. When you delete your account, your identity is removed from those cards, but the historical scores stay behind as an anonymous entry so the group's money history does not silently change months later.
Deleting your account
You can delete your account from inside the app: open your account screen and, under Danger zone, choose Delete account. It removes your personal information as described above, signs out every device, and cannot be undone.
If you cannot get into the app, write to [email protected] from the mobile number on the account. The deletion page sets out exactly what goes and what stays.
Your rights
Wherever you live, you can ask us to show you what we hold about you, correct it, delete it, or send you a copy. Email [email protected] and we will answer within 30 days. We will not treat you differently for asking.
If you are in the EEA or the UK, our lawful basis is the contract between us — we cannot run a leaderboard without your name and scores — except for The Booth and Heckles, which run on your group's consent and can be switched off at any time. You have the right to complain to your local data protection authority.
If you are in California: we have not sold or shared personal information in the preceding twelve months, and we do not do so now.
Children
Skullaroo is not directed to children. The app is rated for adults, tracks wagers between adults, and we do not knowingly collect anything from anyone under 13. If you believe a child has given us their information, write to us and we will delete it.
Security
Traffic between the app and our servers is encrypted with TLS. Your sign-in token is stored in the iOS Keychain, not in ordinary app storage. There are no passwords to steal, because there are no passwords. No system is perfect, and we will tell you promptly if something happens that affects you.
Where your data lives
Our servers and service providers are in the United States. If you use Skullaroo from elsewhere, your information is transferred there and handled under this policy.
Changes
If we change this policy in a way that matters, we will update the date at the top and tell you in the app before the change takes effect.