What we store, and how it's protected

Building a gameplan does require a free account, because the whole point is that it saves and comes back to you every time you sign in.

Once you are signed in, the work you do in the app saves to your private row in our database so it can come back on your next visit. That includes:

• Your intake answers: age range, the state or states you live in, city, branch, military job, service era, and current status.
• Your VA disability rating, if you tell us.
• Your employment and housing situation, including if you indicate housing is unstable.
• Sex and race or ethnicity, if you choose to answer. Both questions are optional.
• Your goals, priorities, pay target, and the free-text notes you write at each step.
• Your generated gameplan and which steps you have checked off.
• Your Pathfinder answers and, if you use the resume scanner, the resume text you paste in.
• Display settings like your theme and text size.
• If you first arrived from one of our flyers, QR codes, or shared links, the campaign tag on that link (for example "vso" for the sheet we hand to veteran service posts), plus the site that referred you. This tells us which outreach actually reaches veterans. It records how you found us - never what you did on other sites.

Your password is never seen or stored by us. Sign-in is handled by our authentication provider, which stores only a hashed version that cannot be read back.

Every one of those questions is optional. You can build a useful plan without answering any of them. We ask only because some programs are specifically aimed at those groups, and skipping the question means we cannot point you to those programs. We do not use this information for anything else.

• Supabase hosts our database and handles sign-in and account emails. Your saved plan and your login live there.
• GitHub Pages serves the website itself. Like any web host, its servers log the IP addresses that request pages.
• GoatCounter counts page views anonymously so we can tell which pages actually help. No cookies, no personal identifiers - it cannot tell who you are, and neither can we. Explained plainly below.

Fonts and icons are served from this site directly, not from a font network, so no additional service learns that you visited.

Nobody else. No data brokers, no advertising networks, no lead buyers.

• We do not sell, rent, or trade your information to anyone.
• We do not run advertising scripts, tracking pixels, or cross-site tracking of any kind. The only measurement on this site is the anonymous page counter described in the next section.
• We do not sell your details as a sales lead to lenders, insurers, agents, or schools.
• We do not use your answers to train any AI model. Your plan is produced by fixed rules we wrote, not by a language model.
• We do not share anything with the VA or any government agency, and they do not see your account.

If we ever add advertising measurement, you will be able to switch it off for your device on the do not sell or share my information page, which works today and needs no account. We cannot look anyone up in the counter, and neither can anyone else - there is nothing personal in it to look up. It never sees what you type, your answers, or your plan; those follow the rules in the sections above. If your browser sends a Do Not Track or Global Privacy Control signal, we do not count the visit at all. GoatCounter publishes its own privacy policy at goatcounter.com/help/privacy.

To delete your saved plan and your account entirely, contact us and we will purge both, including your login record. We are building one-click deletion into the profile page and will remove this manual step when it ships. Until then, a request from you is enough. We do not ask for a reason.