Who owns the data every launch monitor collects from your swing? You hit shots. The launch monitor measures 30+ parameters per swing. That data goes to the company’s cloud — not just your phone. Trackman leaked 32 million records in 2024. Full Swing’s new owner can access your swing mechanics. SkyTrak logs biomechanical info. Most privacy policies let companies keep, analyze, and sell your shot data. Garmin is the only major brand that lets you opt out of cloud storage entirely. The rest of the industry operates on a model where your swing is their asset.
There’s a question nobody in the home golf space is asking out loud.
Buying a launch monitor — a $599 Garmin R10, a $1,995 SkyTrak+, a $6,000 GC3 — means entering a data relationship that starts the moment you connect to WiFi. Every swing you take uploads information to a server you’ve never seen, run by a company that wrote a privacy policy you’ve never read, and that data is processed through algorithms designed to extract value from what you do in your garage.
You think you own your swing data. You don’t.
And in 2026 — the year Trackman left 110 terabytes of user data exposed on an open Azure server, the year Full Swing sold for $530 million to a company that explicitly plans to connect simulator data to booking behavior and instruction content — this question matters more than anyone in the industry wants to admit.
What Your Launch Monitor Actually Knows About You
A modern launch monitor captures 20-40 data points per swing. Club speed, ball speed, smash factor, launch angle, spin rate, spin axis, club path, face angle, attack angle, dynamic loft, club face impact location. Some of these are measurements. Some are calculated estimates. All of them are data.
That data gets uploaded to the manufacturer’s cloud for a few reasons. One: it needs to live somewhere to sync between devices, support software integrations, and enable features like online play and leaderboards. Two: the companies analyze it to improve their algorithms. Three: it’s valuable.
But those are just the things the marketing materials mention. The privacy policies reveal more.
Full Swing’s privacy policy says they collect “biometric-adjacent data such as swing mechanics and physical performance metrics” along with gameplay data, device information, and location data. They also reserve the right to transfer all of this information “in connection with the sale or transfer of our assets or business” — which is exactly what happened when Versant bought them for $530 million in July 2026. A ULF New York analysis of the deal specifically flagged “biometric-adjacent data” as a privacy risk that diligence teams should assess.
SkyTrak’s policy goes further. Under “Fitness and Biomechanical Information,” they say they collect “details relating to your movement, biomechanics, fitness and exercise information where you choose to share them.” The sharing is not really optional — it’s built into how the device works.
Trackman’s policy is the most transparent, which is ironic given their data breach. They collect “performance data, including but not limited to data parameters, video recordings, screencasts, reports, ball data parameters, lifetime stats, and achievements/badges.” They also share contact and shot data with facility owners when you visit commercial venues. They say they reserve the right to sell bag information (types of clubs, specifications) to partners and sponsors with your explicit consent — but the “explicit consent” check is one tap on a screen in a setup wizard.
Full Swing, SkyTrak, Trackman, Garmin, Uneekor, Rapsodo. Every single one has a data pipeline from your garage to their servers. Every single one collects information you probably didn’t know you were sharing.
The Trackman Breach: A Real Warning
This isn’t theoretical.
In August 2024, security researcher Jeremiah Fowler found a Trackman database containing 31.6 million records — 110 terabytes of data — sitting on a Microsoft Azure server with no password protection. The exposed data included names, email addresses, device hardware information, IP addresses, camera log details, WiFi configuration data, and security tokens. Anyone who found that server could have accessed it.
Think about what that data enables. WiFi configuration details tell an attacker what router you use and what encryption protocol your network runs. Security tokens can be used to impersonate your device. Camera logs tell someone when your simulator cameras were active. In a worst-case scenario — which Fowler described as “hypothetical but possible” — an attacker could use exposed device GUIDs to identify vulnerable units, target specific devices, and potentially gain access to the networks those devices run on.
Trackman’s customers include PGA Tour pros, Olympic athletes, and major broadcasters. If the breach had been exploited maliciously, the phishing attacks on high-net-worth professional golfers would have been devastating.
Fowler reported the breach. Access was secured. Trackman never confirmed how long the database had been exposed or whether anyone else accessed it.
The scary part? Trackman is headquartered in Denmark and is subject to GDPR — one of the strictest data protection regimes in the world. If a company operating under GDPR can leave 110 terabytes of user data exposed, what’s happening with the data held by US-based companies that operate under no equivalent federal privacy law?
The Versant Problem
The Full Swing acquisition by Versant Media Group is a new category of concern.
Versant owns Golf Channel, GolfNow (tee time booking), and GolfPass (instruction subscriptions). They explicitly told investors that Full Swing’s tracking and analytics would be connected to GolfNow’s booking data and GolfPass’s content recommendations to create “a more connected golfer profile across simulator, course, and media touchpoints.”
That is a company building a comprehensive data profile of you as a golfer. Your swing speed. Your shot patterns. Your favorite courses. The tee times you book. The instruction content you watch. The time of day you practice. The clubs in your bag. All of it connected through one corporate parent.
This is not sinister corporate behavior. It’s a legitimate business strategy. Versant paid $530 million for the company. They have every right to derive value from the data their acquisition generates. And nowhere in the Full Swing or Versant privacy policies is there language that says “we won’t connect your simulator data to your tee time booking history or your instruction content consumption.”
But here’s the thing: when you bought your Full Swing simulator, you didn’t know you were entering a relationship with a media conglomerate that also owns your booking platform and your instruction subscription. The privacy policy you clicked “agree” on says they can transfer your data in an acquisition. They did. Now it lives in a much bigger machine.
What the Companies Actually Say
I read through the privacy policies of the five biggest launch monitor manufacturers so you don’t have to. Here’s what each one says about your data:
Trackman: Will not sell your personal information without consent. Can share your shot data with facility owners. Retains data for 24 months after account closure, then anonymizes it for R&D. If you use a Trackman at a pro shop or range, the shop gets your data. GDPR covers their European customers.
Full Swing (now Versant): Broad data collection including swing mechanics and “physical performance metrics.” Can transfer all data in an acquisition — which just happened. Privacy policy is written for a pre-Versant world; the combined entity’s policy hasn’t been updated yet.
SkyTrak: Explicitly collects “fitness and biomechanical information.” Says they do not sell your data under CCPA definitions (California). Reserves the right to share with affiliates, service providers, and in a business transfer. Broad “usage data” clause covers everything from shot data to browsing history.
Garmin: The only manufacturer that gives you a clear opt-out. The R50 user manual includes a “Storage & Processing” setting under Profile Settings: “Opts out of data storage and processing, which results in the deletion of all your personal data from the Garmin servers.” Every other brand should copy this.
Uneekor: Collects shot data, swing video, and usage analytics. Privacy policy is shorter and less detailed than the others — which is not necessarily good. Less detail can mean broader interpretation.
What You Can Actually Do
The honest answer is: not much, if you want to use the product as intended.
Every launch monitor with cloud features needs to upload data to function. The apps, the leaderboards, the online play, the software updates, the integration with GSPro or E6 — all of it requires a data pipeline to the manufacturer’s servers. You can’t opt into the features and opt out of the data collection. The product is the data pipeline.
But there are things you can do:
Garmin owners: Go into Profile Settings and turn on “Storage & Processing” opt-out. This deletes your data from Garmin servers. You lose cloud features like online leaderboards and course downloading, but your shot data stays local.
Trackman owners: You can request deletion of your data under GDPR (if you’re in the EU) or by contacting privacy@trackman.com. They retain data for 24 months post-account closure. You can ask them to delete it sooner.
Everyone else: Read the privacy policy. Look for “data deletion,” “account closure,” and “opt-out” sections. Send an email to the privacy contact asking what data they hold and how to delete it. CCPA (California) and similar state laws give you the right to know and the right to request deletion. Even if you don’t live in California, most companies apply these policies broadly.
General: Don’t create accounts you don’t need. Use guest profiles where available (Garmin supports them). Don’t link your launch monitor account to social media or other platforms. Consider what software you run — GSPro and E6 Connect have their own data collection policies separate from your launch monitor’s.
The Bottom Line
The home golf industry is building a data economy on top of hardware sales. The margins on hardware are thin and getting thinner. The margins on subscriptions, analytics, and data products are fat and growing. Every company knows this. Every privacy policy is written to maximize the second revenue stream.
The Trackman breach is the warning. The Versant acquisition is the confirmation. Your swing data is valuable, and the companies that collect it know exactly what it’s worth.
If you’re building a sim in your garage, this shouldn’t stop you. The hardware is incredible, the experience is transformative, and the privacy risks are manageable — especially if you buy from a company that gives you real controls, like Garmin.
But you should know what you’re signing up for. Every time you plug in a launch monitor, connect it to WiFi, and hit the first ball of a practice session, you are generating a data point that lives on someone else’s server, in a database you can’t see, protected by a security program you’ve never evaluated, governed by a privacy policy you agreed to in thirty seconds.
You don’t own your swing data.
The question is whether that bothers you enough to do something about it.
Want to dig deeper? Read our Trackman data breach analysis, our Garmin R50 review with the data opt-out walkthrough, and our Versant/Full Swing consumer implications guide.