Privacy
Three & Two is a free game for friends, in a private beta. This page says what it keeps about you and who can see it. Last updated 11 November 2026.
What we keep
- Your sign-in: your email address, or the Google account email if you use Google. We never see a Google password.
- Your profile: the display name and country you choose.
- Your game: your squad, lineups, transfers, leagues and results, and a record of every change, so the season can be checked and rebuilt.
- Feedback and surveys: what you write in the feedback button (and the page you sent it from) and your survey answers. A tick says whether we may contact you; it is off unless you tick it.
- How long a lineup took: the time you opened the Lineup screen and the time you saved. Nothing else about your visit.
- Emails we sent you, and your email settings, so nothing is sent twice and your opt-outs are kept.
We do not use analytics, advertising, tracking pixels or third-party scripts, and we do not use photos. The only cookie is the one that keeps you signed in.
Who can see it
- Other managers see your display name, country, and your place in the leagues you share. They see your lineup only after it locks at the first tee time, and never your squad.
- The organiser cannot read your lineup before it locks either. The database stops everyone, administrators included, from reading an unlocked lineup or your squad order, and there is no admin screen that shows them. If the organiser ever needs to look at one to fix a fault, that is a deliberate step on the server and not something the app offers.
- The organiser can read feedback and survey answers, the email log, and the game record once the lineups in it have locked.
Who handles it for us
- Supabase holds the database and the sign-in (data centre in Ireland).
- Vercel serves the website. Fly.io runs the background job that reads golf scores and sends emails.
- Resend delivers the emails we send you: lineup reminders and weekly results. Every email has an opt-out link, and you can switch each kind off on your Account screen.
- Google, if you choose to sign in with it.
- Golf scores come from a public data feed. We send it nothing about any person.
Errors and logs
When something breaks we log what failed and where, with email addresses, ids and tokens removed. The logs are kept by our hosts for a short time.
Your choices
You can change your name and country and switch emails off on your Account screen. To see what we hold about you, or to have your account and data deleted, email hello@threeandtwo.app.