PROLATIQ
DE Sign in Join

Privacy

Last updated: 8 November 2026. This policy covers prolatiq.com and the Golfdex app (prolatiq.com/golfdex). It follows the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

In short: No advertising or tracking cookies, no analytics tool. To use Golfdex you create an account. We store your entries in it so you have them on all your devices and they don't get lost. Only you can see them. Other signed-in golfers can find you by name in player search and then see your first and last name. We only show more if you switch it on yourself, and you can switch the search off at any time. For the waitlist we only store what we need to keep you informed.

1. Controller

Steffen Schmid, Birrächerstrasse 23, 8966 Oberwil-Lieli, Switzerland
Email: info@prolatiqapp.com

2. Hosting

The website and the app run on Cloudflare, Inc. (USA). When you visit, Cloudflare processes technically necessary data such as your IP address, the time, the page requested and browser details in order to deliver the pages and protect them against attacks. Data may be transferred to the United States. Cloudflare is certified under the Swiss-U.S. Data Privacy Framework.

We serve our fonts ourselves; Google Fonts is not used.

3. Waitlist

When you sign up, we store your email address, the sports you selected, your language and the time of sign-up. You first receive an email with a confirmation link. You are only added once you click it (double opt-in). We use this information solely to let you know when Prolatiq and its sports lines launch, and we do not share it with third parties for advertising.

Emails and contact management are handled by Brevo (Sendinblue SAS, Paris, France). Brevo stores this information in the EU. Every email contains a one-click unsubscribe link. We keep the information until you unsubscribe or the project is discontinued.

So that no sign-up gets lost when many people sign up, we also store it in our database (Cloudflare D1, see section 2): email address, language, sports, time and whether the confirmation email has been sent. If the daily sending quota has been reached, we automatically send the confirmation email a little later. We will delete this entry at any time on request.

To protect the form against automated sign-ups (bots), it uses Cloudflare Turnstile (Cloudflare, Inc., USA, see section 2). Cloudflare checks technical characteristics of your browser and your IP address. No advertising or tracking cookies are set, and the information is only used for this check.

4. Golfdex: your account and your data

Registration: You use Golfdex with your own account. At the moment you can only register with an invitation code. We store your first name, last name and email address (required) and, if you wish, your year of birth, handicap and home course, as well as the invitation code used and the time of registration. Your first and last name appear as player name on your collectible cards (you can change it). We deliberately only ask for the year of birth, not your full date of birth. We only use year of birth, handicap and home course in aggregate to improve Golfdex (for example age groups or popular home courses). You can change or delete these details in the settings at any time.

Age: Golfdex is intended for people aged 16 and over. Anyone younger may only use Golfdex with their parents' consent and confirms this when registering. If the year of birth given shows that someone is under 16, we store this confirmation with the account. Parents can contact us at any time to view or have their child's account deleted.

Signing in without a password: To sign in, we send you a 6-digit code by email. Brevo handles the sending (see section 3) and logs the recipient and time. The code is valid for 10 minutes and is stored in our database only as a checksum, not in plain text. The sign-in and registration forms are also protected by Cloudflare Turnstile (see section 3). So that nobody can request or try out codes in bulk, we store your IP address and email address together with the number of attempts for a short time (usually no more than two hours).

Staying signed in: After you sign in, Golfdex sets a strictly necessary cookie ("gdx_s") to keep you signed in. It only applies to prolatiq.com/golfdex, is valid for one year, is renewed whenever you use Golfdex and is not used for advertising or tracking. For each sign-in we store the time and the type of device (for example "iPhone Safari") so you can sign out on all devices. Signing out deletes the cookie.

Your entries: What you record in Golfdex is stored in your browser's storage (Local Storage and IndexedDB) and synced with your account: achievements with course, hole, shots, date, witnesses and notes, photos you attach, your bucket list and your app settings (player name, unit, landscapes, poster). We also store when you first and last used Golfdex. The data is kept in a Cloudflare database (Cloudflare D1, see section 2). Only you can see your entries (exceptions: anonymous posts and support, see below). Your account details (name, email address, profile, registration, last visit, number of achievements) can also be seen by the operator in order to manage the beta. We only analyse the data in aggregate and do not pass it on.

Support and maintenance: So that we can find errors and help you with problems, selected Prolatiq administrators can view your collection in the app: cards with golf course, hole, result, shots, date, witnesses and notes, your bucket list and your app settings. Photos are not shown. This is done only for maintenance and support and is read-only; nothing is changed. Every such access is logged with the time and the administrator. The legal basis is our legitimate interest in a working and secure service (Art. 6(1)(f) GDPR).

Social media posts: On our own channels (for example Instagram “vispoca_cards”) we show aggregated figures, such as the number of new cards, results or the golf courses with the most cards. We also show individual collectible cards with a delay (at the earliest 24 hours after they were recorded) and anonymised, i.e. without names (as “Golfdex Player”), with golf course, hole, result and strokes. We never show your name, email address, notes, photos or witnesses. If you do not want one of your cards to be shown like this, write to us at info@prolatiqapp.com and we will not use it or will remove the post. The legal basis is our legitimate interest in making Golfdex known (Art. 6(1)(f) GDPR).

Player search: Signed-in golfers can search for other golfers under “Find → Golfers”. You choose whether and how you appear there when you register and can change it at any time under Settings → “Your account” → “Player search”. By default your profile is limited: others can only find you by name and only see your first and last name. With private, you do not appear in search. With public, others see your name and only the details you switch on individually: age group (for example 30–39, never your year of birth), handicap and home course. Only details you switch on can be used as search filters. We never show others your email address, year of birth, entries or photos. Anyone who is under 16 according to their year of birth, or who registered with parental consent, is always private and cannot be found. You can change your choice at any time and it applies immediately. To protect against mass scraping, the number of searches is limited. Player search is part of the Golfdex service. Being findable by name is based on our legitimate interest in letting golfers find each other (Art. 6(1)(f) GDPR); you can object at any time by setting your profile to private. We only show your age group, handicap and home course with your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with the respective switch.

Golf Buddies: You can connect with other golfers as Golf Buddies. A connection only exists if both agree (request and acceptance). Golf Buddies see each other's album: golf course, tier, card number and the best result per course, plus your name and the details you switch on in player search. They never see notes, photos, witnesses, shots or your email address. You can remove Golf Buddies or block people at any time; the other person then no longer sees your album. Requests are limited to 10 per day. Anyone who is under 16 according to their year of birth cannot send or receive requests and can only connect when meeting on the course. With the “Album summary” switch you also show others the number of your cards per tier, courses and countries (only with a public profile, off by default). Golf Buddies are based on the performance of the contract, i.e. the service you use (Art. 6(1)(b) GDPR); we only show the album summary with your consent (Art. 6(1)(a) GDPR).

Meeting on the course and signature: For a meeting, Golfdex creates a QR code with a random code that is valid for 3 minutes and is stored only as a hash. When your playing partner scans it, you are connected, even with a private profile. If you choose, we store the golf course and the time of the meeting. Golfdex uses the camera only for scanning on your device; no images are transmitted. You can optionally draw a signature (not under 16). It only appears on the signed player card that Golf Buddies receive when you meet, and is copied into the connection at the time of the meeting for this purpose. If either of you removes the connection, this copy is deleted too. The signature is based on your consent (Art. 6(1)(a) GDPR), which you withdraw by deleting it.

Witnesses and printed cards: For a hole in one or an albatross you can choose Golf Buddies as witnesses. They receive a request with golf course, hole, result and date and can confirm or decline. Confirmed cards carry the “Witnessed” seal and the witness’s name; you and your Golf Buddies can see it. If you print a card, it contains a QR code with a fixed, random code for your account. It leads to the page prolatiq.com/p/…, which anyone can open without signing in and which shows exactly what you share in player search: for a private profile (or under 16) only a note that the profile is private, for a limited profile your name, for a public profile also the details you have switched on. The page sets no cookies and is blocked for search engines. If your account is deleted, the code no longer leads anywhere. The legal basis is the same as for player search.

Deletion: Your location, if you share it, stays on your device only (for 30 days). Settings → "Delete all data" deletes your entries on the device and in your account. Settings → "Delete account" immediately deletes your entire account including profile, entries and photos. Database recovery points that Cloudflare keeps for emergencies are overwritten after 30 days at the latest. Otherwise we keep your data until you delete it or the project is discontinued.

5. Golfdex: services your browser contacts directly

For the map and search, your browser loads data directly from the following providers. They receive your IP address and the respective request:

Posters (PDF and SVG) and images for sharing are created entirely in your browser.

Transfers abroad: According to the Swiss Federal Council, the United Kingdom and the EU (Brevo) provide adequate data protection. Cloudflare, Esri and Google are certified under the Swiss-U.S. and EU-U.S. Data Privacy Framework and therefore also provide adequate protection. To our knowledge, the Wikimedia Foundation is not certified. It only receives what your browser sends to load a course photo (IP address and image address). This is necessary for Golfdex to provide the feature you are using (Art. 17(1)(b) FADP, Art. 49(1)(b) GDPR).

6. Golfdex: location, photos and sharing

Golfdex only asks for your location when you tap the location button and agree in your browser. It is used to centre the map on your surroundings and show nearby courses first. Golfdex only accesses photos you select yourself. Photos are resized, stored on your device and synced with your account (see section 4). When you share an achievement, the image or text only goes to the service you choose (for example WhatsApp), whose terms then apply.

7. Browser settings

Your choice of language and design (light or dark) is stored only locally in your browser and is not sent to us. Apart from the Golfdex sign-in cookie (section 4), we do not set any cookies.

8. Legal basis

Providing the website and app, including map and search features, is based on our legitimate interest in offering a working service (Art. 6(1)(f) GDPR). We process the required details and the data in your Golfdex account to provide the app to you (Art. 6(1)(b) GDPR). We process voluntary details (year of birth, handicap, home course) and showing them in player search, the waitlist, your location and photos only with your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

We do not make automated individual decisions and do not create profiles about you.

9. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. A short email to the address above is all it takes. You can also lodge a complaint with a supervisory authority: in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in the EU the authority of your country of residence.

10. Changes

If Prolatiq gains new features, such as printed cards, we will update this policy. The current version on this page applies.

This translation is provided for convenience. The German version is legally binding.