How WindTee keeps your data safe

For club committees, secretaries and IT advisers. Last updated 12 November 2026. Questions: hello@windteegolf.com.

Stored in the EUGoogle Cloud, Belgium

Encryptedin transit and at rest

Members give no detailsto use the app

GDPR processor termsin our club terms

Where your data is

The club’s data (members’ app, staff hub, screens) is stored on Google Cloud and Firebase in the EU (Belgium), run by Google Ireland. Daily backups stay in the EU too.
WindTee is provided by Whitelight Analytics Limited, an Irish company (no. 828636), under Irish and EU data protection law.
For its members’ information the club is in charge (the controller); WindTee only handles it for the club (the processor), under the data processing terms in our club terms.

Members don’t give a name, email or phone number to use the app: each phone joins with a random identifier and the club’s code.
A member’s name is only recorded when club staff verify their phone so they can message the clubhouse. Nobody can verify themselves.
No advertising, no tracking cookies, and nothing is ever sold.

Every read and write is checked by database rules on Google’s servers, whatever the app or page asks for. A club’s members’ messages, for example, can only be read by that club’s own staff.
Each staff member has their own login. The club’s admins choose what each role can see and do, and the same limits are enforced on the server.
Adding an admin alerts WindTee and the club’s other admins, so an unexpected admin is noticed at once.
Staff passwords are held by Google’s sign-in service and are never readable by WindTee. Setup codes last 24 hours and allow 5 tries; the club code at windteegolf.com/join allows 20 tries an hour.
Within WindTee, only its founder can open the system, and only to run and support it.

If the club links its tee sheet or results system, club staff type the login into the staff hub themselves: never by email, never on a TV.
Once saved, a login can’t be read back by anyone; only the club’s own paired screens use it, and only to read. WindTee never books, changes or enters anything in those systems.

Secure connections only (HTTPS, with HSTS), and protective settings on every page against common web attacks.
The accounts that run WindTee are protected by 2-step verification.
Card and bank details for invoices go only to Stripe; WindTee never sees or stores them.
Every change is tested before it goes live, including automatic tests of the database rules, and the software is kept up to date.
Clubhouse screens are checked every 15 minutes, so WindTee knows when one goes offline.

The database is backed up every day; backups are encrypted, stay in the EU and are kept for 30 days.
Each kind of information is deleted automatically when its time is up (for example messages after 12 months, a phone unused for 13 months), on the schedule in our privacy notice.
If a club leaves, its data is deleted within 90 days, or returned to it first if it asks.

If a club’s data is ever exposed, we tell the club within 48 hours, so it can meet its own 72-hour duty to tell the Data Protection Commission (or the ICO in the UK), and we help it tell anyone affected.
Found a security problem? Email hello@windteegolf.com (also listed in our security.txt). We reply quickly and thank anyone who reports responsibly.

We use Claude (Anthropic) to help draft our own emails and set up a new club’s course. Members’ names and messages are never sent to it, a person checks everything before it’s used, and under Anthropic’s commercial terms nothing sent is used to train its models.

More detail: our privacy notice at windteegolf.com/privacy, and our club terms, including the data processing terms, at windteegolf.com/terms.