Eagle Sheet is an independent project run by one developer. We don't sell data, we don't run cross-site advertising trackers, and there is no analytics profile built about you as a person.
The things you type in: the round's name, player names, handicaps, and scores. These are stored so everyone with the link sees the same live card. Player names are whatever you enter — they don't have to be real names.
Opening the app creates an anonymous identity so the server can tell which scorecards are yours. It isn't linked to a name or an email. If you later create an account, that same identity keeps its scorecards and gains your email address.
Anyone holding a scorecard link can open it, at the level that link grants — view, score, or manage. Treat the manage link like a password. The link's secret part lives after the # in the address, which browsers never send to a server; it is also stripped from every error report before it is sent.
When something breaks, we send a report so it can be fixed: the error and where in the code it happened, the page you were on, your account id, your email if you have an account, and a short trail of the last actions (which pages, which requests).
These are processed by Sentry (Functional Software, Inc., United States), acting as our processor.
Player names, team names, course names, scores, scorecard link passwords, and the secret part of any scorecard link. That last one is enforced in code and covered by tests, not left to care.
You can switch error reports off at any time in Settings. It takes effect immediately — nothing further is sent. The app works exactly the same either way.
We don't keep a separate record of what you do in the app. To see which parts are worth improving we simply count the rounds and events already stored to make the app work — how many were created, how many were finished. Nothing extra is collected to do it, and nothing is sent to an analytics company.
Premium is a one-time payment handled by Stripe. Card details go directly to Stripe and never reach us — we only learn that a payment succeeded, so we can unlock your account.
The site is served by Cloudflare, data is stored with Supabase, and account emails (sign-up confirmation, password resets) are delivered by Resend. Mail you send us is forwarded by Cloudflare into a Google inbox we monitor. Each processes data only to provide those services.
Deleting a scorecard removes it and its scores. For an account and everything attached to it, email hello@eaglesheet.app and we'll remove it.