Privacy
What fore:bitcoin keeps, who can see it, and how to have it deleted.
fore:bitcoin is an invite-only app where bitcoiners who golf find each other, arrange games and record how they played. It is run by Mosarric Services Ltd, a company registered in Scotland (SC346592). Mosarric decides how your information is used and is responsible for it under UK data protection law, and under the EU’s for members in the EU and the EEA. “We” on this page means Mosarric.
Last updated: 4 November 2026
- We keep only what the app needs to put you in touch with other members and to record your games.
- We never sell or share your information, show ads, or use analytics or tracking.
- We never track where you are. You choose your home club and town.
- Messages are kept on our server. They aren’t end-to-end encrypted.
- You can delete your account in the app at any time.
When you sign in
You sign in one of three ways, and we keep only what that way needs.
- Email. We keep your email address and send a six-digit code to it. We store the code only as a fingerprint that can’t be turned back into the code.
- Nostr. We keep your public key. Your signer app proves you hold the key, and your private key never leaves it.
- Lightning wallet. We keep the public key your wallet makes for fore:bitcoin. Nothing is paid, and we never see your wallet’s funds or its other keys.
Signing in gives your phone a session token, which it keeps in its secure storage. We keep only a fingerprint of the token, so it can’t be read from our server. It lasts until you sign out, delete your account or remove the way you signed in with, or until a year has gone by without your using it.
Anyone can ask for a sign-in code, and we look for an invitation only once the code is entered, so nobody can use the sign-in to find out who is a member. If someone without an invitation asks for a code, their address is deleted with the code, within two hours.
Your profile
Your profile holds your name, and if you add them, a photo, a banner behind it, a few words about you, how you like to play, your home club, your handicap as you declare it, your country and town, and whether you’re open to a game. It says when you joined, and who invited you. Only your name is required.
If you sign in with a Nostr key, you can choose to show it on your profile, so other members can find you on Nostr.
Other members can see your profile. People who aren’t members can’t.
We resize photos and banners when you upload them. This also removes the hidden details a phone adds, such as where the photo was taken.
Games and results
We keep the games you arrange or join: the club, date and time, format, players, who is booking the tee, and each player’s part, such as invited, asked to join, declined or waiting for a place. A friend who isn’t a member can be added to a game as a guest, by name only. The players in a game, and members invited to it or asking to join, can see its details. A game with places is also shown to other members, with its players and guests, so they can ask to join.
After a round, players enter the result: each player’s total or points, a guest’s under their name, a match result such as “3&2”, a team score, or that it was played with no scores, along with each player’s handicap that day. Or they say the game wasn’t played. We keep who entered or changed the result, or said the game wasn’t played, and when. The players in the game can see its result.
Your personal stats are worked out from your results whenever they’re looked at, and aren’t stored separately. Other members see your rounds, averages and match record on your profile. Who you’ve played with is for you alone, except that a member looking at your profile sees anyone you’ve both played with.
Messages, rooms and posts
- Messages and chats. One-to-one messages, the chats for groups and games, and the room for each country are kept on our server, so they reach the people they’re for. A message can be seen by the people in its conversation, group or game, and one in a country’s room by any member. Messages aren’t end-to-end encrypted, so we could read them. We don’t, except to deal with a report. We also keep how far you’ve read in each chat, and which you’ve muted.
- Groups. A group’s name and who’s in it can be seen by its members, and only by them. Someone added to a group sees its messages from then on, and nothing said before. Its chat says who added whom, who left or was taken out, and when the name was changed. When the last member leaves, the group and its messages are deleted.
- Posts asking for a game, at home or away, such as “I’m in Lisbon next week”, can be seen by other members. One for somewhere away from home tells the members open to a game near there.
- Nostr posts. You can choose to publish a “looking for a game” post to Nostr. It is then public: anyone can read it, and it is stored on relays we don’t run. A Nostr post can’t be fully taken back. We can ask relays to delete it, but they don’t have to.
Notifications
If you allow notifications, we keep a token for your phone, so we can tell you about messages, games, groups and reminders, and when a friend you invited joins. Notifications pass through Expo, and then Apple or Google, to reach your phone. They name the sender and the kind of event, and a reminder names the club and who else is playing, but they never say what a message says. We delete a phone’s token when you sign out on it, or when Expo tells us it no longer works.
Invitations
When you invite a friend, we keep their email address or Nostr key so we can recognise them when they sign in, and your name goes with the invitation. If you invite them by email, we send them one email, and another each time you send it again. Its link signs them in once, within a week, and we keep only a fingerprint of it.
If you show a friend a QR code, or send them a link from your phone, it lets one friend join within a day. We keep when you made it and a fingerprint of the link, and nothing about your friend until they join.
An invitation nobody takes up is deleted after 90 days, or as soon as whoever sent it withdraws it. If someone invited you and you’d rather we didn’t keep your address, write to us and we’ll delete it.
Clubhouse rules, blocks and reports
We keep who you’ve blocked, so that neither of you sees the other in the app, except in a game you’re both already in. When you report a member, a message or a club a member added, we keep the report, what was reported and what we did about it, for two years after we’ve dealt with it, so we can see if a problem comes back. Each report is emailed to us as it’s made, so we can deal with it quickly. We also keep the date you agreed to the clubhouse rules and the terms of use.
On your phone
The app keeps your session token in the phone’s secure storage, with an invitation’s key until someone signs in, and if you sign out with no signal, the old token until our server has been told, and notes that it has looked for an invitation in how it was installed and that it has asked to send you notifications; the games you’re playing in that are waiting for a result, with their players and handicaps, so you can enter one with no signal, at the course; any result you enter with no signal, until it has been sent; and any message you’ve sent that hasn’t gone yet, until it has or you remove it. Signing out clears those games, results and messages. The app also keeps the members’ photos it has shown in its own cache, which Android clears as it needs the room. Nothing else is stored on the phone. The app never uses the camera, or reads your contacts or your location. Of your photos, it sees only the ones you choose for your profile. Directions to a club open your phone’s maps app with the club’s name and where it is, and nothing about you. A club’s website opens in your browser, and Add to my calendar opens your phone’s calendar with the game filled in, for you to save. The app doesn’t read your calendar.
Logs and backups
Our server’s logs record the time, the kind of request, its path without any query, whether it worked and how long it took. They don’t record internet addresses, email addresses, keys or messages. Logs are deleted after seven days.
To stop abuse, the server counts the requests from each internet address for one minute, in its memory, without writing the address down. To limit the sign-in codes it emails, it keeps a fingerprint of each code’s mailbox and of the network that asked for it, for a day, which can’t be turned back into either.
We back up the database and photos every night, encrypted, to storage away from our server. Backups are kept for 30 days.
Who else is involved
We use a few companies to run fore:bitcoin. Each sees only what its job needs and may use it only for that job.
| Company | What it does | What it sees |
|---|---|---|
| Hetzner (Germany) | runs our server, database and backups | everything we keep, stored on its machines |
| Resend (USA) | sends sign-in codes and invitation emails, and each report to us | the email address and the email, which for a report includes what was reported |
| Expo (USA), with Apple and Google | delivers notifications | your phone’s token and the notification |
| Google Play and Apple’s App Store | let you download the app. Google Play also passes an invitation’s link to the app when it’s installed from it. | what you share with them, under their own privacy policies, and that link’s one-time key |
Resend and Expo are in the USA. Both have joined the EU-US Data Privacy Framework and its UK extension, the UK’s data bridge with the USA, so your information stays protected when it goes to them. Our server and its backups are in Hetzner’s data centres in the EU, and the UK recognises the EU as protecting personal data properly.
Nostr relays hold only the posts you choose to make public. We share nothing with anyone else, unless the law requires us to.
Why we use your information
Data protection law asks us to say why we’re allowed to use your information.
- To provide the app you joined. Signing in, your profile, games, results, messages and notifications.
- Our legitimate interests. Keeping fore:bitcoin secure and working (logs, limits and backups), dealing with reports, and keeping an invitation so we can recognise the friend it’s for. We’ve weighed these against your rights, and you can object to them (see Your rights).
- Your choice. Notifications, what you add to your profile beyond your name, such as a photo, and Nostr posts happen only if you choose them, and you can stop them at any time.
- The law. Keeping or handing over information when the law requires it.
No decisions about you are made automatically.
How long we keep it
| What | How long |
|---|---|
| Sign-in codes, and the address of anyone without an invitation | up to two hours |
| Nostr and Lightning sign-in challenges | up to 30 minutes |
| Your session | until you sign out, or with no signal, until the app can next tell us, delete your account or remove the way you signed in with, or a year after you last used it |
| Fingerprints of the mailbox and network behind a sign-in code | a day |
| Your profile, games, results and messages | until you delete them or your account |
| An account nobody gave a name, with the invitation that made it | 30 days |
| A post asking for a game | until the end of its last day, or until you remove it or delete your account |
| A group and its messages | until its last member leaves |
| An invitation nobody takes up | 90 days, or until whoever sent it withdraws it |
| An invitation’s link | a week, or until it’s used |
| A QR code, or a link sent from your phone | a day, or until it’s used, and its fingerprint with the invitation |
| Reports | two years after we’ve dealt with them |
| Server logs | seven days |
| Backups | 30 days |
Deleting your account
You can delete your account in the app, at the foot of the You tab. If you can’t use the app, the page at forebitcoin.com/delete-account/ says how to ask us instead.
Deleting your account removes your profile, with its photo and banner, your posts in the app, your email address and keys, your sessions, your phone’s notification tokens, your blocks, the invitation that brought you in, and any invitations you sent that nobody has taken up. It takes you out of your games coming up, and their players are told: a game you organised passes to the player who joined it first, or is cancelled if nobody else is in it. It takes you out of your groups too, and their chats say you’ve left.
Some things stay, because they’re part of other members’ records:
- Messages you sent stay in their conversations, groups, games and rooms, shown as from a deleted member.
- Results you entered stay with the game, without your name, so the other players’ records stay whole.
- Reports you made, or that were made about you, stay for two years after we’ve dealt with them, so we can see if a problem comes back.
- Posts you made public on Nostr stay on the relays that hold them.
Copies in our backups are gone within 30 days.
Your rights
You can ask us for a copy of the information we hold about you, in a form you can take elsewhere, and ask us to correct it, delete it, or stop or limit how we use it. Most of this you can do in the app. For anything else, write to privacy@forebitcoin.com. We’ll answer within a month, and we may ask you to sign in or answer a code first, to check that it’s you.
If you’re unhappy with how we’ve used your information, you can complain to the Information Commissioner’s Office at ico.org.uk, or in the EU or the EEA, to the data protection authority where you live. We’d like the chance to put it right first.
Age
fore:bitcoin is for adults aged 18 and over. If we learn we hold information about someone younger, we delete it.
Keeping it safe
Everything sent between the app and our server is encrypted. Sign-in codes, invitations’ links and session tokens are kept only as fingerprints, your Nostr and wallet keys never reach us, and backups are encrypted. Only Mosarric can reach the server and its database.
This website
forebitcoin.com sets no cookies, runs no analytics and loads nothing from other sites.
Changes to this page
When this page changes, the date at the top changes too. If a change affects how we use your information, we’ll tell members in the app before it takes effect.
Questions
Write to privacy@forebitcoin.com.