DIRT POORAbout Dirt Poor

Dirt Poor Privacy Policy

Effective Date: September 11, 2026

Overview

Dirt Poor is a public ledger of exceptional public-access golf. This Privacy Policy explains what information Dirt Poor uses, why it uses that information, what becomes public, and how you can request deletion or ask a privacy question.

Luffed Sail LLC, a Virginia limited liability company, owns and operates Dirt Poor. In this policy, “Dirt Poor,” “we,” “us,” and “our” refer to Luffed Sail LLC in its operation of the service.

Dirt Poor's initial launch is focused on the United States. Accounts and contributions are intended for adults 18 and older.

Information We Use

Account and authentication information

When you create an account, Dirt Poor uses:

Authentication is provided through Supabase. Your password is sent to the authentication service for account creation, sign-in, and password changes. Supabase stores a password hash rather than your plaintext password. Your email address and authentication credentials are not part of your public Profile. Never send your password or a verification or recovery link to Dirt Poor by email.

Public Profile information

Creating an account also creates a public Profile containing:

Display Name is labeled "Name" at signup. It is your chosen public name, not a verified legal identity. You may use your own name or a handle.

We also store an account identifier and Profile creation and update timestamps. Your initial Display Name and Home State are submitted as account metadata to Supabase Auth as well as used to create your Profile. Updating your public Profile does not currently replace those original signup-metadata values.

Public Profiles can be viewed without signing in. Profile creation occurs when your account is created, before email confirmation is completed; public visibility does not wait for your first sign-in.

Scout Reports and public attribution

When you submit a Scout Report, the report becomes part of the public Dirt Poor ledger. Reports contain your Course evaluation, optional Field Notes, and context about the round and Course. This includes architecture, price and playing-experience evaluations; round, rate and day types; design characteristics; whether you would return; and information about family friendliness, spectators and the nineteenth hole. The price evaluation is not payment-card information or a purchase transaction.

We store report and Course identifiers, the author's account identifier, creation and update timestamps, and First Scout status to associate and present these records.

Your current Scout Reports are publicly attributed to your public Profile. Dirt Poor also derives public contribution statistics from current Scout Reports, including Courses Scouted, First Scout Recognitions, and States Played.

Editing a Scout Report replaces its previous evaluation in the current ledger. Dirt Poor does not provide a public version history for edited Scout Reports. This does not mean that technical backups or provider logs are immediately overwritten.

Course discovery and maps

Dirt Poor presents public Course information and Course locations for discovery. Course-location data describes golf courses; it is not your personal device location.

The current app does not request your device's GPS location. Search terms, filters and sorting choices are used to retrieve Courses from Supabase. Dirt Poor does not build a personalized discovery-history record from these searches, but requests and their parameters may be processed in service-provider logs.

Maps, font delivery, authentication and hosting involve network requests. Providers receive technical information needed to deliver those requests, such as IP addresses and request metadata. Google Maps SDKs also process technical usage and diagnostic information. These requests can convey device or network information even when the map only displays Course locations.

Device and browser storage

The app stores session information on your device or in your browser's local storage to keep you signed in. Signing out normally removes the locally stored session. You can also clear local app or browser data using your device or browser controls; doing so does not delete your account or public contributions.

The app includes local theme-preference storage and may cache downloaded fonts. These are distinct from a personalized browsing-history or advertising system.

Account emails and support

We send account-related messages, including email verification, password recovery, email-change confirmation and security notices. Delivery providers process recipient addresses, message content, verification links and delivery records. Your email provider also receives the messages delivered to your mailbox.

If you contact support@dirtpoor.org, we receive your email address, correspondence and any information or attachments you choose to provide. We use that information to respond and handle the request. Do not include passwords or unnecessary sensitive information.

How We Use Information

Dirt Poor uses information to:

Dirt Poor is currently free to use. The current app has no advertising, payment-card collection or subscription workflow. Its account emails support account access and security rather than a marketing subscription.

Dirt Poor currently has no off-app sales, advertising, sponsorship, affiliate, commercial data-sharing or content-licensing arrangements beyond operating the ledger. We use the service providers described below to operate the service.

What Is Public

The following information is public and may be viewed without an account:

Do not include private, confidential, or sensitive personal information in a Display Name or Scout Report.

Other people may copy public information. Deletion from Dirt Poor's current ledger does not remove independent copies someone else has made.

Service Providers

Dirt Poor uses the following services to deliver the current experience:

Supabase receives account information, public records and requests made to its services. Google services receive the requests needed to supply maps or fonts and related technical information. Email services receive recipient addresses and account-message content, not the password entered into the app. Providers also process information under their applicable terms and privacy practices.

Cloudflare receives technical request information, such as IP addresses and request metadata, when you visit the website. It processes that information to deliver and protect the website.

The app loads a Cloudflare Turnstile check in an embedded browser before account creation, sign-in, and password-recovery requests. Turnstile processes technical signals such as your IP address, browser and connection characteristics, and the verification page's origin to detect bots. Cloudflare also uses these signals to improve Turnstile's bot detection. The app sends the resulting verification token to Supabase Auth for validation. Dirt Poor does not send the password or Profile fields you enter to the verification page. See Cloudflare's Turnstile Privacy Addendum for its processing practices.

We use FlutterFlow to develop the application.

Dirt Poor does not use first-party advertising or behavioral-analytics integrations. Provider operation, security, diagnostic and usage processing is separate from that statement.

Data Retention

Moderation and safety records

To protect users and the public ledger, Dirt Poor processes submitted names and Field Notes for screening, and maintains necessary content revisions, screening results, complaints and explanations, and human-review decisions. Private review records may include the reporter's account identifier, target account or report identifier, limited evidence, reason, reviewer and timestamps. Access is restricted to the people and systems authorized to handle safety and review requests; reporter identities are not displayed publicly or disclosed to the reported contributor through the reporting workflow.

Pending or removed text is not publicly displayed or available through public data access. Its author can access their own pending submission as appropriate. Moderation does not create a public history of edited or removed reports. Screening runs within Supabase; submitted text is not sent to an external text-moderation provider.

Dirt Poor also stores private contributor-block relationships to remember whose reports you choose to hide in View All Scout Reports. The target is not notified. Unblocking or deletion of either account removes that relationship. Blocking changes your report-list visibility, not the public scores or another person's access to the ledger.

Dirt Poor uses necessary moderation records to explain and review enforcement decisions, administer active restrictions, address appeals and disputes, and meet applicable legal obligations. Records include relevant evidence and the rule, finding, action, reason, reviewer and dates. Corrections and appeal outcomes are recorded without silently replacing the original decision during the applicable retention period.

Necessary moderation decisions and supporting evidence are retained under a defined retention schedule. Relevant records may be preserved longer when needed for active enforcement, unresolved disputes, or legal obligations. Active-restriction records are limited to what is needed to administer and explain the restriction; they do not justify keeping every related personal detail forever. When a preservation obligation applies, routine deletion of the relevant records is suspended until that obligation ends. Unrelated records remain subject to their normal schedule.

Our retention schedule calls for deletion of necessary detailed case records and evidence one year after final case closure, including any appeal, unless active enforcement, an unresolved dispute or a legal hold justifies longer retention. Extensions are documented and reviewed at least annually. A review does not end an applicable legal preservation obligation.

A limited private history of case counts and resolutions is kept while the account exists, even if the user has not recently signed in, to support consistent review of repeated conduct. This summary is separate from detailed evidence and distinguishes confirmed violations from dismissed, duplicate or overturned cases. It is not a public record or an automatic penalty system. Account-level summaries are deleted with the account unless a specific enforcement or legal need justifies retaining the minimum necessary record. Detailed evidence remains subject to the case-retention schedule and applicable deletion obligations.

Support and privacy-request correspondence

We retain routine support and privacy-request correspondence, associated attachments and copies made to handle the request for one year after resolution, to address follow-up and maintain a limited record of our response. We remove unnecessary sensitive material sooner and preserve only necessary records longer when legally required.

Moderation complaints, appeals and evidence follow the moderation schedule above, including when received by support email. The support schedule does not restart or extend their retention period. Provider backups and logs have separate retention periods.

Current account, report and provider retention

Account information and public Profile information remain in the live service until account deletion. Accounts are not automatically deleted solely because they are inactive or their email remains unconfirmed. Current Scout Reports remain until their owner deletes them or the associated account is deleted, subject to any removal necessary to enforce the Terms or applicable law.

Deleting a Scout Report permanently removes that report from the current Dirt Poor ledger. Deleting an account permanently removes the account, public Profile, and associated Scout Reports through the established account-deletion process.

The in-app deletion process removes live account and ledger records. It does not directly erase provider backups or logs, email-delivery records, support correspondence, messages in recipient mailboxes, or copies on another person's device.

Technical backups, logs and email-delivery records may remain for service recovery, security, troubleshooting and applicable legal obligations. Their retention periods vary by provider and service. You may contact support@dirtpoor.org with questions about these records or a deletion request.

Deleting a Scout Report

You may permanently delete a Scout Report you own through its edit or contribution-management experience.

Deletion removes the report and its public attribution. It also removes that report's contribution to category averages, the Dirt Poor Score, and rank. First Scout recognition may disappear and does not transfer. If the report was the Course's final Scout Report, the Course returns to Unscouted.

You may later submit a new Scout Report, but the deleted report is not restored.

Deleting Your Account

You may permanently delete your account through the authenticated Delete Account flow in Dirt Poor.

Account deletion removes your authentication account, public Profile, and associated Scout Reports. The resulting Course aggregates, Dirt Poor Scores, ranks, and contribution statistics are recalculated from the Scout Reports that remain. First Scout recognition associated with a deleted report may disappear and does not transfer.

You may also contact support@dirtpoor.org about an account-deletion or data request. We may need to verify that you control the relevant account before acting on an emailed request.

Account deletion cannot be undone through the app. The app attempts to sign out the device used for deletion. Existing access tokens or previously downloaded content on other devices may persist temporarily; account deletion is not a remote wipe of every device or mailbox. Retention of other copies is addressed above.

Security

Dirt Poor uses authentication, database access controls, owner-scoped permissions, and server-controlled privileged operations as part of its security practices.

No system can guarantee complete security. You are responsible for protecting your password and for contacting support@dirtpoor.org if you believe your account has been compromised.

Age Eligibility and Underage Information

Dirt Poor is intended for adults and does not offer accounts or contribution features to anyone under 18. Permission from a parent or guardian does not change that eligibility requirement.

If you believe someone under 18 has created an account or provided personal information to Dirt Poor, contact support@dirtpoor.org. We will review the concern and take appropriate steps to address the account and delete personal information as required by applicable law. Do not send identity documents or unnecessary sensitive information with your initial request.

Privacy and Data Requests

You may contact Dirt Poor to ask about your information or request an available privacy or data right.

Email: support@dirtpoor.org

We may need to verify your identity before acting on a request. Available rights and response procedures depend on the laws that apply to your request.

Changes to This Policy

Dirt Poor may update this Privacy Policy as the service or its data practices change. The current version shows its effective date and is available wherever this policy is provided.

We will communicate material changes through channels appropriate to the change and affected users, and provide any additional notice or obtain any consent required by applicable law.

Contact

Questions about this Privacy Policy or Dirt Poor's data practices may be sent to:

support@dirtpoor.org

Dirt Poor

Back to Dirt Poor