Privacy policy.
What we collect, why we collect it, and who else sees it. Written from what the software actually does, not from a template.
LAST UPDATED 8 SEPTEMBER 2026
Who we are
Overthrow Disc Golf LLC, a Virginia limited liability company, runs this website, the Overthrow Academy membership, and the Overthrow Academy mobile app. If you want anything explained, corrected or deleted, email mikey@overthrowdiscgolf.com and a human will answer.
What we collect
Your account
When you sign up we store your name and email address, and your subscription status and plan. Outseta hosts the account and handles subscriptions bought on the website. If you subscribe inside the app, Apple or Google handles that purchase and we record which store it came from, so your Overthrow account shows an Academy membership billed by that store. Your access comes from the subscription the store tells us about, which is why cancelling with Apple or Google is what ends it. We never see or store your full card number; it stays with Outseta's payment processor, Apple or Google, depending on where you subscribed.
If you create the account with Sign in with Apple, we also store Apple's stable identifier for this app and the authorization credential needed to revoke that connection if you delete the account. While a new Outseta account is being confirmed, we keep a recovery record containing that identifier, the email Apple shared, a server-generated account secret and the revocation credential. We remove the recovery record after the accounts are safely linked or after a failed signup is safely cleaned up. If Apple temporarily refuses a revocation, we retain that revocation credential in a pending-cleanup record and retry before the next Apple session or final account deletion. If Apple may have issued a credential but a connection failure prevents us from receiving and saving it, we keep a support-required recovery marker and block Apple sign-in and account deletion until the authorization is confirmed removed in your Apple ID settings. An Apple sign-in request already in progress when deletion finishes can leave a late pending-cleanup record. It cannot restore account access: the next Apple sign-in is cleanup-only and retries that removal, returning the deleted-account result only after cleanup is confirmed. Once provider cleanup is confirmed, we retain only one-way hashes of the Apple connection and deleted member id. Those hashes contain no Apple credential, email or raw Apple identifier; they prevent the deleted connection from silently recreating the account and let an interrupted cleanup retry find its owner.
What you watch
We record which lessons you have started and finished, roughly where you got to in a video, and which courses you have bookmarked. This is stored against your account so your progress is the same on the website and in the app. It is what makes “pick up where you left off” work.
Your training history
When you are signed in, the app backs up training results to your account so they can follow you to another device. That history includes completed or deliberately ended Field Work sessions, completed Putting sessions, finished Seven's putting games, your saved Seven's player roster, your configured throwing distances, TechDisc personal-record summaries, and compact TechDisc throw measurements and game results. A compact throw can include its time, throw type, speed, spin, disc angles, wobble, scoring mode and the result assigned by a training game.
Seven's is a group game, so it is the one part of your training history that holds other people's names. A finished game records who won, the points each player took, and how many putts were thrown and made. The roster is simply the list of player names you have typed in. Those names are whatever you chose to enter — the people you play with, who may not be Overthrow members themselves — and they are stored and deleted with your account exactly like the rest of your training history.
Field Work uses your phone's location while a session is running, but the app converts those fixes into distances and miss measurements on the phone. It does not upload your raw GPS latitude or longitude as part of training history.
Your TechDisc connection
If you choose to connect TechDisc while signed in, the app stores the API key on your device and backs up an encrypted copy tied to your Academy account so another signed-in device can restore the connection. The server stores that bearer credential using AES-256-GCM authenticated encryption; it is separate from training-history JSON and is returned only through an authenticated account request. Disconnecting removes the Academy account copy and this device's copy. It does not revoke the key at TechDisc or erase a copy another device already restored; rotate or revoke the key in TechDisc settings if you need that.
Coaching
If you are on a coaching plan, we store the messages between you and your coach, the video clips you send for review, the goals you fill in when you start, and the reviews your coach sends back. Your coach can see all of it — that is the point of the service. Video you submit is hosted by Cloudflare, on their Stream and R2 services. We keep it so you and your coach can look back at how your throw has changed.
Film Room clips stay on your phone
Clips you record or import into the app's Film Room are stored only on your device. They are not uploaded, not backed up by us, and we cannot see them. The single exception is a clip you deliberately send to your coach for review — nothing leaves your phone until you tap send. Delete the app and those clips go with it.
The FAQ assistant
The “Ask us” assistant on this website sends your question to Anthropic's API to generate an answer. If you are signed in, it also sends your name, email, current plan and a summary of your progress, so it can answer questions about your own account. Do not put anything in that box you would not want sent to a third-party AI provider. It is on the website only — there is no assistant in the app.
Website analytics and referrals
This website loads the Meta (Facebook) pixel, which tells Meta that a browser visited our pages and may be used for advertising, and PromoteKit, which credits affiliates when someone they referred signs up. Both run on the website only. Neither is in the mobile app, and the app does not track you across other companies' apps or websites — which is why it does not ask you for tracking permission.
Technical data
Our host, Vercel, keeps standard server logs, and we use your IP address briefly to rate-limit the assistant so it cannot be abused. Lesson videos are played through Cloudflare Stream, with Vimeo as the fallback player. Both collect their own playback data under their own privacy policies. If you turn on notifications in the app we store a push token so we can tell you when your coach replies.
Who else sees your data
We do not sell your personal information. We share it only with the services that make the product work:
| Service | What it handles |
|---|---|
| Outseta | Accounts, website subscriptions and payments, your progress record |
| Apple | Sign in with Apple and subscriptions or payments bought through the iPhone or iPad app |
| Sign in with Google and subscriptions or payments bought through the Android app | |
| Vercel | Hosting and server logs |
| Vimeo | Lesson video playback, as the fallback player |
| Cloudflare (Stream and R2) | Lesson video playback, and coaching clips you submit for review |
| Discord | Your linked Discord user id and paid-member server role |
| Neon | Coaching records, account-synced training history, and the AES-256-GCM encrypted TechDisc credential vault |
| TechDisc | Live disc and throw data when you choose to connect your TechDisc account |
| Anthropic | Answers the FAQ assistant (website only) |
| Meta, PromoteKit | Advertising and affiliate credit (website only) |
| Expo | Delivering app notifications |
How long we keep it
Account details, lesson progress, training history and coaching history are kept while your account is open, because they are the record of your training. An encrypted TechDisc credential is kept until you disconnect it or delete the account. When account deletion completes, we remove the active account-linked database records, synced training rows and encrypted TechDisc credential, and tell Cloudflare to delete videos linked to the account's coaching threads, upload history or league rounds, including their provider copies. The deletion does not complete if that media request fails, so it can be retried while we still know which videos belong to the account. If you linked Discord, we retain its user id in a deletion-only retry record until the paid role is confirmed removed, then delete that retry record. Billing records that we are legally required to keep, plus the one-way Apple/member deletion hashes described above, are the exceptions. Provider backups and standard server logs follow those providers' retention schedules.
Your choices
You can ask us for a copy of what we hold, ask us to correct it, or ask us to delete it — email mikey@overthrowdiscgolf.com. Depending on where you live you may have a formal right to those things; we will honour the request either way rather than argue about which law applies. You can turn app notifications off in your phone settings at any time, and you can decline or block the website's advertising cookies in your browser.
Children
Overthrow is not aimed at children under 13 and we do not knowingly collect their information. If you believe a child has given us their details, email us and we will delete the account.
Changes
If we change what we collect, we will update this page and change the date at the top. Material changes to how we use your data will be announced by email.