Updated October 22, 2026.
GolfersFirst uses your name, email, password hash, account role and email-verification status to provide CourseVantage account access. Passwords and active session identifiers are stored as hashes. We use a secure, HTTP-only session cookie; sessions expire after 12 hours or one hour of inactivity.
Your course-access requests, supporting links, review notes and account assignments are available to you and authorized administrators. Public course reports can include checked source links and numeric review or social summaries. They do not expose your account email, password or ownership-review notes.
Course-profile social links are published with their submission or approval status. Independently reviewed public mentions can appear with a short factual summary, source URL and original publication date for 90 days. Candidate search excerpts and private review notes remain restricted to administrators. When public-web search is configured and requested, Tavily receives the course name and location search terms; account credentials are not sent.
Information you supply in report correction forms is public supplemental course information, including its source link, description and review status. Do not submit private contact information or credentials. Private administrator review notes and submitting account identifiers are excluded from public reports.
Render hosts the application and database. When email delivery is configured and you request a verification or reset message, Resend processes your email address and message for delivery. Google review summaries, when connected and requested by an approved course user, are retrieved live and are not stored in the CourseVantage database. Google's Privacy Policy applies to Google's services.
Public course search and evidence previews do not require an account. The owner checklist is calculated in your browser. You can sign out at any time. To request correction or deletion of account information, contact support@golfersfirst.com. Account and review records are retained while needed to provide the service, handle requests and maintain its security. Dated source evidence remains clearly identified.