Privacy Policy
Last updated: 1 October 2026. This explains what Nineteenth Club collects, why, who handles it, and the choices you have.
What we collect
When you request consideration: your name, work email, LinkedIn profile address or invite code, and your agreement to the no-pitch guarantee.
Once you are a member: your job title, company, industry, city, handicap, pace, walk or ride preference, goals, availability, home club, the rounds and invitations you take part in, the messages you send in them, and reviews you give or receive. We also keep a record of administrative actions on accounts, and of sign-in sessions.
How we use it
To review applications, run the club, suggest foursomes, courses and times, send you email about your membership and rounds, and keep members safe. Messages and invitation notes are automatically checked for sales pitches; a possible pitch is flagged for the membership committee to read. We do not sell your data, show paid placements or post on your behalf.
What other members see
Name, title, company, city, handicap, pace and goals. Never your email address. Your reviews of other members are private and only shape who the club suggests.
Who processes your data for us
- Google Cloud (Cloud Run and Cloud SQL, hosted in the United States): hosts the service and stores the data for members worldwide.
- Firebase Authentication (Google): signs you in with Google or an email link.
- Google Maps Platform: shows maps and looks up golf courses. Course searches are sent to Google; your profile is not.
- Google Vertex AI: estimates course details such as par and yardage. Only the course name and location are sent.
- Typesafe: checks message text for sales pitches. The text of a message or note is sent for scoring.
- Stripe: takes membership payments once dues begin. You enter card details on Stripe's page and they never touch our servers. We store your Stripe customer and subscription identifiers, your tier, your payment status and the date you are paid through; Stripe keeps the payment details and sends your receipts.
- Resend: delivers our email, so it sees your email address and the message.
How long we keep it
Member data is kept while you are a member, and applications that are declined are kept so we can recognise repeat applications; ask us to delete yours at any time. When you delete your account, your profile, invitations, and invite codes are removed, and anything others share with you, such as past rounds and messages, stays with your name removed. Administrative and security logs are kept so the committee can account for its decisions.
Your choices
Signed-in members can download all their data and delete their account from the Profile page. You can also write to us to correct or delete your data, and we will reply within 30 days. Members in the European Economic Area, the United Kingdom, California and elsewhere may have additional rights to access, correct, delete and port their data; we honour them for all members, wherever you live. Because the service is hosted in the United States, your data is transferred there.
Cookies and analytics
One cookie keeps you signed in and expires after 14 days. Your browser also stores Firebase sign-in state and, briefly, the email you typed while signing in by email link. Both of our sites load fonts from Google Fonts, which receives your IP address. We run no advertising trackers and no third-party analytics. Google Fonts and Google Maps may set their own technical cookies.
Security
Traffic is encrypted, passwords are never stored because there are none, and access to the database is limited to the service itself. No system is perfectly secure. If something affects you we will tell you.