Privacy Policy
This Privacy Policy explains how Beacon Games Pty Ltd("Pureplay," "we," "us," or "our") collects, uses, and shares information when you use Pureplay. By using Pureplay, you agree to the practices described below.
Who we are
Beacon Games Pty Ltd is a proprietary limited company registered in Australia. We are the data controller for the information described in this policy. For any questions about this policy or your data, contact us at support@pureplaygolf.com.
What this policy covers
This policy applies to all of Pureplay, which means:
- Our websites: pureplaygolf.com, including the waitlist and our course request, voting, champion, and operator pages.
- Your Pureplay account: signing up, signing in, and your account dashboard.
- The Pureplay game: the game client you install, the shots and rounds you play, and multiplayer sessions with other people.
- Our documentation site and any other service that links to this policy.
Some of what follows only applies once you do a particular thing, such as create an account, play a round, or buy a subscription. We say so where that's the case.
Information we collect
When you join the waitlist
- Email address (required): so we can send you waitlist updates.
- Launch monitor setup (optional): the launch monitor you currently use or plan to use.
- Role (optional): whether you identify as a home sim owner, facility operator, or future owner.
- Graphics card tier (optional): so we can give you better performance guidance ahead of launch.
- ZIP or postal code (optional): so we understand where our community is based.
- Hardware compatibility feedback (optional): a 1 to 5 rating of how important launch monitor compatibility is to you, which helps us prioritize hardware integrations.
When you request or vote for a course
- Email address (required): so we can confirm your request and associate your votes.
- Course details: the course you request, including its name and location (city, state, and country). If you add a course that isn't on our list, the name you submit is reviewed by a moderator and may be published on our course map and voting leaderboard. Your name and email are not published. We convert the location you give us into map coordinates using a third-party geocoding service.
- Course website (optional): a link to the course you're requesting.
- Marketing preference: whether you'd like product updates in addition to messages about your request.
- Where you came from: if you reached us through a link we gave to a partner, creator, or livestream, we record which link it was, so we can see which ones bring people to the course map. It is a short label such as
live, it identifies the link and not you, and it is carried in the web address rather than stored on your device. We don't store anything on your device to do this and it doesn't follow you to other websites.
When you champion a course or sign a course agreement
- Contact details: your name, email address, and, where relevant, your role or title at the course.
- Signature and agreement records: if you sign a course agreement on our operator page or upload a signed copy, we collect your electronic signature or the signed document you upload, and we keep the executed agreement as a business record.
When you create a Pureplay account
- Account details: your email address, your password (stored only as a one-way hash, never in readable form), and your player handle and display name.
- Profile details (optional): your avatar and the profile information you choose to add.
- Sign-in provider details: if you sign in with Google, Discord, Facebook, or Microsoft, we receive the basic profile details that provider shares with us, such as your name, email address, and avatar.
- Password safety check: when you set a password we check whether it has appeared in a known data breach. We send a short fragment of a one-way hash to a third-party service to do this, never the password itself.
- Handle and avatar review: handles, display names, and avatars are checked automatically against our content rules before they go live, and may be sent to a human reviewer if flagged.
- Session and device records: the devices and sessions signed in to your account, so you can review and revoke them.
When you play
- Shot and round data: the shots you hit as reported by your launch monitor, and the rounds, scores, and statistics built from them.
- Multiplayer session data: presence and session details needed to put you in a live round with other players, which are handled by our multiplayer provider.
- Device and license records: the devices your Pureplay license is active on, so we can enforce your plan and protect your account.
When you subscribe or pay
- Billing details: your subscription, plan, and payment history. Your card details go directly to our payment processor. We never receive or store your full card number.
Information we collect automatically
- Usage data: pages viewed, referring website, time on site, and similar analytics data.
- Device data: IP address, browser type, operating system, and device type.
- Error and performance data: how quickly pages load and details of errors you run into, so we can fix them.
- Session recordings: if you consent to analytics or performance cookies, we record a replay of your visit. Text you type into forms is masked, and so is the text on the page.
- Email engagement: whether you opened an email we sent and whether you clicked a link in it.
- Cookies and similar technologies: see Section 8 below.
How we use your information
We use the information we collect to:
- Send you waitlist emails, including build updates, early access drops, and founder previews.
- Send you service emails about actions you take, such as confirming a course request, a signed course agreement, or a subscription change. These are not marketing emails and are sent whether or not you opt in to updates.
- Create and run your account, sign you in, and keep it secure.
- Run the game: simulate and record your shots and rounds, build your statistics, place you in multiplayer sessions, and maintain leaderboards and competitions.
- Validate gameplay so leaderboards, competitions, and creator payments are based on genuine play.
- Take payment, manage your subscription, and pay course designers what they are owed.
- Operate our course request and voting programs, including reviewing and moderating submitted courses, maintaining the course map and voting leaderboard, and contacting you about a course you requested or championed.
- Enter into and administer course agreements, including verifying signatures and keeping executed agreements.
- Keep the community safe by reviewing handles, display names, and avatars against our content rules.
- Verify your age where a feature requires it.
- Understand product fit and prioritize features, hardware integrations, and content based on your feedback.
- Measure and improve performance, diagnose errors, and operate and secure our services.
- Comply with legal obligations and enforce our Terms.
Legal bases for processing (EU/UK users)
If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR/UK GDPR:
- Consent: for sending you waitlist and marketing emails, and for analytics and performance cookies including session recording. You can withdraw consent at any time.
- Performance of a contract: for running your account, delivering the game, taking payment, processing course agreements you sign with us, and taking steps you request before entering into one, such as processing your course request or champion inquiry.
- Legitimate interests: for sending service emails that confirm actions you take, operating our course request and voting programs, validating gameplay, moderating content to keep the community safe, preventing fraud and abuse, operating and securing our services, and improving our product. Our interests are balanced against your rights.
- Legal obligation: where we must process data to comply with applicable law, including age assurance requirements and keeping financial records.
How we share your information
We do not sell your personal information. We share it with the service providers listed below, who process it on our behalf and are bound by contract to protect it. Some of them only ever see your data if you use the feature they support. Each provider's name links to its own privacy policy, so you can check what it does with your information.
| Provider | What they do for us | Where data is processed |
|---|---|---|
| Amazon Web Services | Hosting, databases, file storage, and email delivery. Executed agreements and uploaded documents are stored here, and our service emails are sent through it. | United States |
| Vercel | Hosting, content delivery, and request logging for our websites and dashboard. | United States |
| Snowflake | Our data warehouse. Holds gameplay records such as shots and rounds, and the analytics built from them. | United States |
| Datadog | Performance monitoring, error tracking, and log management, including session replay of visits to our sites. Requires your consent. | United States |
| Google (Analytics) | Website analytics. Requires your consent. | United States |
| Microsoft (Clarity) | Product analytics and session recording. Requires your consent. | United States |
| Loops | Email delivery, waitlist management, and transactional emails such as course request and agreement confirmations. | United States |
| Stripe | Payments and subscription billing. Stripe collects your payment details directly; we never receive or store your full card number. | United States |
| Epic Games (Epic Online Services) | Multiplayer sessions, matchmaking, and presence in the Pureplay game. | United States |
| Kids Web Services (Epic Games) | Age verification, where an age check is required before you use a feature. | United States |
| Google, Discord, Facebook, Microsoft | Sign-in providers. Used only if you choose to sign in with one of them, in which case they share your basic profile details with us. | United States |
| Cloudflare | Protects our forms and sign-in pages from bots and abuse. Necessary for the service to work safely. | Global edge network |
| Stream | Automated review of player handles, display names, and avatars against our content rules. | United States |
| Have I Been Pwned | Checks whether a password you choose has appeared in a known data breach. We send only a short fragment of a one-way hash, never your password. | United Kingdom |
| LaunchDarkly | Controls which features are switched on for which accounts. | United States |
| OpenStreetMap Foundation | Turns course locations you submit into map coordinates. | European Union |
| Upstash | Stores aggregate waitlist counters and course vote counts. | United States |
We also use third-party data sources that give us information but never receive yours. For example, we look up real-world golf course details from a golf course directory to check that a course you request exists. Your personal information is not sent to those services.
We may also share information when required by law, to enforce our Terms, to protect our rights, or in connection with a merger, acquisition, or sale of assets (in which case you'll be notified).
International data transfers
Beacon Games Pty Ltd is based in Australia, and our service providers may process data in the United States and other countries. If you are in the EEA or UK, your data will be transferred outside your country. Where required, we rely on Standard Contractual Clauses or other lawful transfer mechanisms to protect your data.
Cookies and similar technologies
We use cookies and similar technologies for three purposes:
- Necessary: required for Pureplay to work. These keep you signed in, protect against cross-site request forgery, tell real people apart from bots, and remember the cookie choices you make. They cannot be switched off, and they do not require your consent.
- Analytics: helps us understand traffic and how our features are used, and records a replay of your visit. Only set if you consent.
- Performance: measures how fast pages load and captures errors you run into, including a session replay, so we can fix them. Only set if you consent.
You choose Analytics and Performance separately when you first visit, and you can change your mind at any time using the Cookie preferences link in our footer, or on your account settings page if you have an account. Nothing in the Analytics or Performance categories runs before you agree to it.
If your browser sends a Global Privacy Control signal, we treat that as declining both categories and we don't ask you again. You can still turn either one on deliberately from the Cookie preferences control if you want to.
| Cookie | Set by | Purpose and category | Expires |
|---|---|---|---|
pp_consent | Pureplay | Remembers the cookie choices you make here. Necessary. | 180 days |
pureplay.session_token | Pureplay | Keeps you signed in. Necessary. | Until you sign out |
pureplay.last_used_login_method | Pureplay | Remembers which sign-in method you used last, so we can highlight it. Necessary. | Until you sign in a different way |
pp-dashboard.*, pp-marketing.*, pp-docs.* | Pureplay | A small set of cookies that carry the sign-in handshake and protect against cross-site request forgery. Necessary. | Session |
pp_invite_token | Pureplay | Carries an invitation through the sign-up flow. Necessary. | Session |
pp_sidebar_collapsed | Pureplay | Remembers whether you collapsed the dashboard sidebar. Necessary. | 1 year |
pp_test_access | Pureplay | Grants preview access to staff before launch. Not set for ordinary visitors. Necessary. | Up to 7 days |
__cf_bm, cf_clearance | Cloudflare | Tells real people apart from bots on our forms and sign-in pages. Necessary. | 30 minutes to 1 year |
_ga, _ga_* | Distinguishes visitors and measures how the site is used. Analytics. | Up to 2 years | |
_clck, _clsk, CLID, SM | Microsoft | Measures how the site is used and links the pages of one visit into a recorded session. Analytics. | 1 day to 1 year |
MUID, MR, SRM_B, ANONCHK | Microsoft (Bing) | Recognises the same browser across Microsoft sites. Set by Clarity when you accept analytics; we do not use them for advertising and tell Microsoft not to. Analytics. | Up to 1 year |
_dd_s | Datadog | Links the pages of one visit together so we can diagnose a performance problem or an error you hit. Performance. | 15 minutes, extended as you browse |
Expiry times are the values in use when this policy was last updated and may change as we tune our services. The category a cookie belongs to, and therefore whether it needs your consent, is what we commit to here. You can also manage cookies through your browser settings, though disabling necessary cookies will stop parts of Pureplay working.
For the cookies set by someone other than us, that company's privacy policy is linked from the table in Section 6.
Our sites embed videos from YouTube using its privacy-enhanced mode. YouTube does not set cookies until you play a video, but Google receives your IP address when the video player loads.
How long we keep your information
We keep waitlist and course request information until our product launches and for a reasonable period afterward, or until you ask us to delete it, whichever comes first. Account and gameplay information is kept for as long as your account is open. Executed course agreements and related signature records are business records, and we keep them for the term of the agreement and as long afterward as the law requires or permits, for example to meet record-keeping obligations or resolve disputes. Financial records are kept for the period accounting law requires.
When you ask us to delete your account, we remove or anonymize your personal information so that the records that remain can no longer be linked to you. Two things deliberately survive that process: records we are legally required to keep, such as financial and executed agreement records, and your player handle, which stays permanently reserved so that nobody else can take it and impersonate you. A reserved handle is kept with no link to you or to any information about you.
Your rights
EU/UK residents (GDPR / UK GDPR)
You have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data.
- Restrict or object to processing.
- Receive your data in a portable format.
- Withdraw consent at any time (without affecting prior processing).
- Lodge a complaint with your local data protection authority.
California residents (CCPA / CPRA)
If you are a California resident, you have the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to opt out of the sale or sharing of personal information. We do not sell personal information. We use analytics providers that may be treated as "sharing" under the CCPA; those only run if you consent, and declining analytics cookies opts you out. We also honor the Global Privacy Control signal: if your browser sends it, we treat that as declining analytics and performance cookies without you having to tell us again.
How to exercise your rights
If you have an account, you can update your details and request deletion from your account settings. Otherwise, email support@pureplaygolf.com. We'll respond within the timeframes required by law. We won't discriminate against you for exercising your rights. Note that we may need to keep executed agreements, financial records, and other records where the law requires it, even if you ask us to delete other information.
Children and age verification
Pureplay is not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, contact us and we'll delete it.
We do not ask for your date of birth when you sign up. Accounts start with the settings appropriate to a younger player, and some features are only available once your age has been checked. When you first try to use one of those features, we ask a third-party age verification provider to confirm your age. That provider tells us whether you meet the age requirement; we do not receive the documents or data you give them.
Some parts of Pureplay are only available to adults. You must be 18 or over to pay for a subscription, receive creator payouts, or own an organization on Pureplay.
Security
We use reasonable technical and organizational measures to protect your information, including encryption in transit, hashed password storage, and access controls that limit who on our team can see what. No method of transmission or storage is 100% secure, however, and we cannot guarantee absolute security.
Third-party links
Pureplay may link to third-party websites. We're not responsible for their privacy practices, and this policy doesn't apply to them.
Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we'll update the "Last updated" date and, where appropriate, notify you by email or through the Service.
Contact
Questions or requests? Email support@pureplaygolf.com.