Privacy policy
Last updated October 6, 2026
Ironed Out helps a golf organizer fill tee times: they share one link and friends claim spots from it. We collect only what that takes. We don’t sell your information, we don’t show ads, and we don’t use tracking or analytics cookies. Using Ironed Out is also covered by our terms of service.
What we collect
- Account details: your name, email address and password (stored only as a one-way hash). An account is optional for players.
- Your mobile number, when you claim a spot or turn on text alerts. We store it encrypted and never show it to other people.
- Outing details: the course, date, tee times, price and note an organizer enters, the name you give when you claim a spot, how many guests you bring, and a history of changes (who joined, who dropped out).
- Crews: groups you create or join, and the names, numbers or email addresses of people you invite to them.
- Alert settings: which texts and emails you want and your quiet hours.
- Technical details: your IP address and browser type when you sign in or try a code (to stop abuse), and three cookies that keep the app working:
| Cookie | What it does |
|---|---|
| io_session | Keeps you signed in. Ends when you sign out. |
| io_device | Remembers that you confirmed your number on this phone, so you don’t need a new code each time (90 days). |
| io_anon | A random id so an invite page can show what changed since your last visit. It isn’t linked to your name. |
How we use it
- To run outings: show the tee sheet, hold your spot and stop two people taking the same one.
- To send the texts and emails you asked for: codes, changes to your outing, reminders and crew invites.
- To keep the service safe: rate limits, spotting abuse and investigating problems.
We don’t use your information for advertising, and we don’t sell or rent it to anyone.
Text messages
When you claim a spot or turn on text alerts, you agree to get texts from Ironed Out about your outings: a code to confirm your number, changes to the tee sheet, reminders before you play, and new outings from your crews. How many you get depends on how busy your outings are. Message and data rates may apply.
- Reply STOP to any text to stop all texts. Reply START to turn them back on, or HELP for help.
- Except for the reminder two hours before your tee time, texts wait until your quiet hours end (10 PM to 7 AM by default).
- We don’t share your mobile number or your consent to receive texts with anyone for their marketing. Our texting provider receives your number only to deliver our messages.
Who can see what
- Anyone with an invite link can see that outing’s course, date, tee times and the names on the tee sheet. Organizers can turn a link off or make a new one.
- The organizer sees who claimed each spot and can remove players.
- Crew members see each other’s names and the crew’s outings.
- Nobody but us sees your phone number or email address.
How long we keep it
| Data | Kept for |
|---|---|
| Texting codes | Deleted after 24 hours (they stop working after 10 minutes). |
| Password reset links | Deleted after 24 hours. |
| Rate-limit counters (may include your IP address) | Deleted after 2 days. |
| Sign-in sessions (with IP address and browser) | Deleted 30 days after they end or you sign out. |
| Texts and emails we sent you | Deleted after 90 days. |
| Outings, tee sheets and their change history | Deleted 18 months after the play date (a booking partner may set a different period for outings it created). |
| Players with only a name and phone number | Deleted once no outing or crew refers to them any more. |
| Your account | Until you delete it. |
| Security log (sign-ins, removals, account deletions) | Kept to investigate abuse; it holds ids and IP addresses, not message content. |
Your choices
- Download or delete your data any time from Your account. Deleting cancels upcoming outings you organize (your players are told), frees your spots and removes your crews.
- Change alerts on the Alerts screen, or reply STOP to a text.
- Drop out of an outing from its invite page; your spot is freed right away.
- No account? To delete the name and number you gave when you claimed a spot, contact us at the address we’ll publish here (not set up yet).
Security
Connections are encrypted, phone numbers are encrypted in the database, passwords are hashed with Argon2id, and each booking partner’s data is kept apart at the database level. No system is perfectly secure; if something goes wrong, we’ll tell the people affected.
Children
Ironed Out isn’t meant for children under 13, and we don’t knowingly collect their information.
Changes
If we change this policy we’ll update the date at the top. If a change affects how we use information we already have, we’ll tell account holders by email first.
Contact
Questions, or want something corrected or deleted? Contact us at the address we’ll publish here (not set up yet).