Privacy Policy

As of June 2026 · pursuant to GDPR

1. Controller

The controller within the meaning of the GDPR is:

Louis Konopatzki
Avenida Padua 3
1800-294 Lisbon
Portugal

Email: [email protected]

2. Data We Collect and Why

2.1 Reports (lost / found clubs)

When you submit a report, we store:

• Club type, brand/model, golf club, date
• Optional description and photo
• Your email address (not publicly visible)
• Interface language and timestamp

Legal basis: Art. 6(1)(b) GDPR.
Retention: Reports are automatically closed after 180 days. Before closing, you receive an email with the option to renew the report for another 180 days per click (legal basis of the renewal: your active consent, Art. 6(1)(a) GDPR).

2.2 Photos

Uploaded photos are stored on our server solely to identify the club and are removed after 180 days.

2.3 Email Notifications

Your email address is used only for confirmations, match notifications and chat alerts. It is never shared with other users.

2.4 Server Log Files

Our host (Hostinger, Lõõtsa 5, Tallinn 11415, Estonia) automatically stores access data: IP address, date/time, URL, HTTP status code. Deleted after 7 days.
Legal basis: Art. 6(1)(f) GDPR.

2.5 Cookies

Cookie	Purpose	Duration
PHPSESSID	Session (CSRF protection)	Browser session
lang	Language preference	30 days

No tracking, analytics or advertising cookies are set.

2.6 QR Protection Tags

If you create personal QR tags (the "QR protection tags" feature), we store your email address, an optional first name and a random tag code so we can notify you instantly when someone scans a found club. Your email is never shown to the finder.
Legal basis: Art. 6(1)(b) GDPR. Deletion: any time on request to [email protected].

2.7 Success Stories

If you voluntarily submit a story after a successful return, we store your text and optionally your first name. Stories approved by our team appear publicly on the homepage (first name only).
Legal basis: Art. 6(1)(a) GDPR (consent, revocable at any time).

2.8 Help Chatbot

Questions to our AI chatbot are transmitted to Anthropic (Claude AI, see section 3) to generate an answer and are logged by us to improve the service. Please do not enter sensitive personal data into the chat.
Legal basis: Art. 6(1)(f) GDPR.

2.9 Abuse Protection (Rate Limiting)

To prevent spam and automated scraping we briefly store a hashed (anonymised) form of your IP address to limit the number of requests per connection.
Legal basis: Art. 6(1)(f) GDPR. Deletion: automatically after 2 days at most.

3. Third-Party Services

Claude AI (Anthropic)

For intelligent matching of reports (comparing descriptions) and for the help chatbot we use Claude AI by Anthropic PBC, USA. The relevant description or chat text is transmitted. Legal basis: Art. 6(1)(f) GDPR. Anthropic Privacy Policy

Cloudflare

To protect against attacks and for faster, global delivery, our traffic runs through Cloudflare, Inc. (USA), which processes your IP address. Legal basis: Art. 6(1)(f) GDPR. Cloudflare Privacy Policy

Google Fonts

This site loads fonts from Google Fonts (Google LLC, USA), transmitting your IP address to Google. Legal basis: Art. 6(1)(f) GDPR. Google Privacy Policy

Unsplash

Background images are loaded from Unsplash (Canada). Unsplash Privacy Policy

4. Data Sharing

Your data is not sold. Sharing only with the following processors (Art. 28 GDPR): Hostinger (hosting/SMTP), Cloudflare (security/CDN) and Anthropic (AI matching and chatbot) – and where legally required.

5. Your Rights (Art. 15–22 GDPR)

You have the right to access, rectification, erasure, restriction, objection and to lodge a complaint with a supervisory authority.

Requests: [email protected]

6. Data Security

Transmission via HTTPS/TLS. Photos are stored with random filenames. PHP execution in the upload directory is disabled.

7. Changes

We reserve the right to update this policy when the service changes.