Golflist app: privacy policy
This policy explains what the Golflist app for iPhone and iPad does with information about you, why, and what your rights are. The short version: there is no account, your wishlist stays on your phone, and the only personal data that leaves the device is what is needed to fetch prices, to deliver notifications you have asked for, and to tell us when the app crashes. Last changed 13 September 2026.
Who is responsible
Droplist Ltd, a company registered in England and Wales and trading as Golflist, is the data controller for the app. It also runs golf-list.com. Questions, requests and complaints go through the contact page.
No account
The app has no sign-up and no login. We do not ask for your name, email address, address, date of birth or payment details, and we never see what you buy from a retailer.
What stays on your device
Your wishlist, your onboarding status and the app's image cache are stored on your device only. We cannot read them, they are not synced to us, and they are deleted when you delete the app.
What is sent, and to whom
Fetching prices and photos
The app downloads its product data from our servers on Amazon Web Services (London region) and product photographs from golf-list.com, which is served by Cloudflare. Like any web request these carry your device's IP address and standard technical details (the request, the time, the app version). They are used only to serve the request and to keep the service running, and are kept in routine server logs for a short period before being discarded.
Retailer logos
Retailer logos are fetched from Logo.dev. The request contains the retailer's web address and, as with any request, your IP address. Logo.dev's handling of that is covered by its own privacy policy.
Notifications
Notifications are delivered through OneSignal. If you allow notifications, OneSignal creates a record for your device holding the push token Apple issues, a random identifier for the app installation, the device model, iOS version, app version, language, time zone, and the country inferred from your IP address. We use this only to send notifications and to see how many devices are subscribed. You can turn notifications off in the iOS Settings app at any time, after which no further messages are sent. OneSignal processes this data in the United States under standard contractual clauses; its own policy is at onesignal.com/privacy.
Usage and crash reporting
The app uses Google Firebase for two things. Firebase Analytics records how the app is used: which screens are opened, which categories and products are viewed, taps through to retailers, and app opens, along with the device model, iOS version, app version, language and country. It is configured without the advertising identifier, and we do not use it for advertising. Firebase Crashlytics sends a report when the app crashes, containing the crash trace, the device model, iOS version, app version, free memory and disk, and a random installation identifier, so we can find and fix the fault. Both use a random identifier for the installation rather than anything tied to you, and both are handled by Google under its Firebase privacy terms, with data processed in the United States under standard contractual clauses. Analytics data is kept for 14 months and crash data for 90 days.
Tapping through to a shop
When you tap a price the retailer's page opens in an in-app Safari view. That view is run by Apple, keeps its own cookies and browsing data, and is not visible to us. The link you follow is usually an affiliate link: it carries a reference telling the affiliate network that the click came from the Golflist app so that a commission can be paid. It does not identify you. From that point the retailer and the network (Awin) handle your data under their own privacy policies.
Apple
If you have chosen to share analytics with app developers in your iOS settings, Apple may pass us aggregated crash and usage data. This is controlled entirely by your Apple settings.
Why we are allowed to do this
Under UK GDPR our lawful basis for fetching prices and photos is that it is necessary to provide the service you asked for. For notifications it is your consent, given when iOS asks whether the app may send them, which you can withdraw at any time. For usage and crash reporting it is our legitimate interest in understanding how the app is used and keeping it working, balanced against the minimal, pseudonymous nature of the data.
What we do not do
We do not sell personal data. We do not show adverts in the app or share data with advertising networks. We do not track you across other apps or websites, and the app does not ask for App Tracking Transparency permission because it does not need it. We do not use your location: the only location-related data is the country inferred from your IP address by the services above.
Children
The app is not directed at children under 13 and we do not knowingly collect data from them. If you believe a child has used the app and data has been collected, contact us and we will delete it.
Your rights
You have the right to ask what personal data we hold about you, to have it corrected or deleted, to restrict or object to its use, and to receive a copy of it. Because the app holds no account, the practical way to remove everything is to turn off notifications and delete the app: the wishlist goes with it, the OneSignal record becomes inactive, and the pseudonymous analytics and crash data expire on the schedules above. If you want the OneSignal record removed sooner, or have any other request, write to us and we will act within one month. You can also complain to the Information Commissioner's Office at ico.org.uk.
Security
All connections the app makes are encrypted with HTTPS. Our product data is public information about golf equipment and contains nothing about you.
Changes
We may update this policy as the app changes. The version published on this page is the one that applies, and the date at the top tells you when it last changed. A material change will be announced in the app.