The Fine Print

Privacy Policy

What we collect, what we don't, and how it all works. In plain English.

Last updated: May 6, 2026

Past the Pin (the "Site") is operated by an independent founder. We try to keep this short and honest. If anything here is unclear, email us — see the bottom.

1. What we collect

We collect the minimum we need to make the Site useful:

  • Your email — only if you sign up for our newsletter or submit a destination/course.
  • Reviews, poll votes, and course suggestions — with whatever name you type into those forms (you don't need to use your real name).
  • Saved trip plans — if you're not signed in, trips are stored in your browser's localStorage and never sent to our servers unless you click "Share." If you're signed in, trips are saved to your account (see Section 4 below).
  • Anonymous analytics — page views, referrers, device type, country. Collected via Google Analytics 4. We do not use these to identify individual visitors.
  • Server logs — our hosts (Vercel, Supabase) log basic request data (IP address, timestamp, URL) for security and debugging. These are short-lived.

We do not collect: precise location, contact lists, financial information, or anything we don't list here.

2. How we use it

  • To send newsletters you've subscribed to.
  • To display reviews, poll results, and shared trips that you submit.
  • To improve the Site (which destinations are popular, what's broken, what people search for).
  • To respond to questions or feedback you send us.

We do not sell your data. We do not run third-party advertising on the Site.

3. Third-party services

The Site relies on a handful of services, each with their own privacy policies:

  • Vercel — web hosting (policy)
  • Supabase — database + email storage (policy)
  • Google Analytics — anonymous traffic analytics (policy)
  • Google Maps Embed — driving directions on destination pages (policy)
  • Web3Forms — newsletter signup notifications (policy)
  • SeatGeek — event search results on destination pages (policy)
  • Booking.com — affiliate partner for hotel links; if you click through, they may set their own cookies (policy)

4. User accounts (optional)

You can use most of the Site anonymously. If you choose to create an account, here's what happens:

  • Sign-in — we use email magic links. No password, ever. Click the link in your email and you're in. Authentication is handled by Supabase Auth.
  • What's stored — your email, plus any data you create while signed in: saved trip plans, your passport (destinations and courses you mark as played or completed), favorited courses and destinations, and any notes you add.
  • Privacy — your account data is private to you. Row-level security ensures no other user can see your trips, passport, favorites, or notes. Sharing a trip publicly is opt-in (you click "Share" to generate a link).
  • Account emails — we use your account email for sign-in links and essential account messages. When you sign in, you'll see a pre-checked box offering the monthly Past the Pin newsletter. If you leave it checked, your email is added to our newsletter list (you can unsubscribe anytime). Uncheck it to skip — we never auto-subscribe without that option being visible.
  • Deleting your account — email contact@pastthepin.com and we'll delete your account plus everything tied to it (trips, passport, favorites, notes) within 7 days.

5. Cookies and browser storage

We use:

  • localStorage for saved trip plans, your subscribe state, and remembering UI preferences. This stays in your browser — we never read it from our servers.
  • Cookies set by Google Analytics for anonymous traffic measurement.

You can clear either at any time through your browser settings.

6. Affiliate disclosure

Past the Pin is an affiliate partner of Booking.com. When you click our hotel or rental car links and complete a booking, we may earn a small commission at no extra cost to you. This helps keep the Site free and community-powered. It does not affect which destinations we list or how they're ranked.

7. Course photos & imagery

Course photos on this Site are sourced from each course's official website, resort marketing materials, and tourism partners. All photos remain the property of their respective owners and are used to help golfers discover and plan trips. If you represent a course, resort, or photographer and would like a photo removed, attributed differently, or replaced with a preferred version, please email contact@pastthepin.com and we'll handle it promptly.

8. Your choices

  • Unsubscribe from emails — every newsletter has a one-click unsubscribe link.
  • Delete your data — email us with your request (see below) and we'll remove your email, reviews, or shared trips within 7 days.
  • Browse anonymously — you can use the Site without signing up for anything. The trip planner works entirely in your browser unless you choose to share.
  • Block analytics — most browsers let you block Google Analytics, or you can use a content blocker.

If you're in the EU, UK, or California, you have additional rights under GDPR / CCPA — including the right to access, correct, or export your data. Email us and we'll handle it.

9. Children

Past the Pin is not directed at children under 13. We don't knowingly collect data from anyone under 13. If you believe a child has submitted information to us, email us and we'll delete it.

10. Changes to this policy

If we update this policy, we'll change the "Last updated" date at the top. For material changes (like new third-party services), we'll note it in the next newsletter. Your continued use of the Site after a change means you accept the updated policy.

11. Contact

Questions, concerns, or requests? Email contact@pastthepin.com. We read everything.