Privacy, briefed clearly.

What we collect

• Your email, if you sign up for the 7-day course, the newsletter, or an optional learning account. That's it. We don't ask for your name, branch, or background to subscribe.
• Where you signed up, a short tag like "homepage" or "newsletter" recorded with your subscription, so we know which pages bring people in. It's not tied to anything you do afterward. If the same email also has a learning account, the two are linked so you're not on the list twice.
• Your display name, only if you create a learning account and choose to set one. The name appears on any badges you earn so the badge URL you share has your name on it. You can leave it blank. Your badges show "Anonymous Operator" by default.
• Lesson completions: signed-in Foundations, Intermediate, Expert, Cleared and Leadership records sync to the account. Academy and Workspace completions stay in browser storage. Browser storage also holds quiz passes, practice self-reviews, the last lesson, appearance preferences and a sign-in return path. Clearing it removes the local record; use the backup in Your learning to export lesson completions. We do not upload your practice artifacts through this site.
• First-party website measurement: the site sends a page path and referring-site host to api.vetslearn.com. It also sends a small set of named counts: lesson opened, practice reviewed, quiz passed, lesson marked complete, next-lesson and call-to-action clicks, sign-in link requested (with the kind of page that prompted it), newsletter signup (with the form's location), clicks out to the tools, and clicks on contact links. Each count carries a short label such as a lesson number or a page section. It carries no free text, no email and no account id. The API stores the path or count, a timestamp, the referring host and a daily rotating visitor hash derived from network address, browser user-agent, date and a server secret. The measurement tables do not store the raw network address or user-agent, and the beacon uses no analytics cookie. This hash supports daily visitor estimates; it should not be described as collecting no identifiers. Query strings and fragments are excluded.
• Email delivery is handled by Resend, which sends the course, the newsletter, and sign-in links. We keep open and click tracking turned off, so there are no tracking pixels in what we send. Resend logs basic delivery status (delivered, bounced) so we can tell if a message reached you.

What we don't do

• We do not sell personal data. Hosting, CDN and email providers process information needed to operate the site; see the service-provider explanation below.
• We don't use Facebook or ad-tech tracking pixels, and we don't run Google Analytics or Google ads.
• On vetslearn.com the fonts are served from vetslearn.com. The tool pages serve their own fonts the same way. No font request goes to Google from either host.
• We don't profile you to retarget you across other sites.
• Public lessons, references and prompt samples do not require an account. An account also provides free full prompt-library access, supported-track synchronization and completion badges.
• We don't use passwords. Sign-in is by a single-use magic link emailed to you.

Service providers and browser controls

Resend processes email delivery. The site is delivered through Cloudflare, which processes network data such as your network address, the page requested and browser details in order to deliver and protect it. Cloudflare also adds its own analytics script to pages on vetslearn.com when a browser loads them. Your browser fetches that script from static.cloudflareinsights.com, and it sends page timing, the page address and browser details to Cloudflare. It is separate from the first-party measurement described above, and the control on this page does not turn it off. Cloudflare also rewrites email addresses shown on a page to hide them from scrapers, and adds a small script, served from this domain, that displays them. What we found on the tools host is in the tools section below. Hosting and API request logs may process network metadata for operation and security. Cloudflare privacy policy and Resend privacy policy describe their handling. Optional AI tools used outside VetsLearn have their own terms and costs.

The sign-in service uses an HttpOnly session cookie with a 30-day expiry. Magic links are single-use and expire after 15 minutes. The control below turns off first-party measurement in this browser, both pageviews and the named counts. A browser that sends the Global Privacy Control signal gets the same result without using the control. Neither one disables necessary hosting processing or Cloudflare’s configuration. This control covers vetslearn.com only. The tools host has its own control, described below.

Disable first-party measurement

The tools (tools.vetslearn.com)

The tools run on a separate host. They need no account and do not ask for an email address. The tools set no cookies of their own. This section says what each part does with what you enter.

Tools that send text to an AI provider

Our AI provider is Anthropic. Six tools on the hub can send text to Anthropic to generate part of a result. Each one shows a notice at the input before you type.

• Skill Translator: your description of what you did, with the occupation, paygrade tier, years of service and target industry you entered.
• Interview Coach: your practice answer or your story, the interview question and the target role.
• Federal Resume Converter: the resume text and job announcement text you paste, and the veterans' preference type you select.
• OPORD Business Plan and Capability Statement: one section, and only when you press Polish. The rest of the plan or statement stays in your browser.
• Plain SAM: Analyze sends a notice's public SAM.gov attachments. Nothing you type on that page is sent to the AI.

The notice at a text input reads: “What you type here is sent to Anthropic, our AI provider, to generate your result. This site does not store it. Remove names, SSN or DoD ID numbers, addresses, phone numbers, unit locations and anything classified or controlled.” The other tools on the hub do not use AI. They compute results from published data on our server.

The AI step can be switched off on our side. When it is off, or when it fails, the tool returns its non-AI result and nothing is sent to Anthropic. Anthropic handles what it receives under its own terms; see the Anthropic privacy policy. Do not enter classified or controlled information in any tool.

What the tool servers keep

• The tool servers have no database of visitors. They do not write what you type, or the result, to a file or a database. The one exception is the Plain SAM search cache described below.
• Where a tool writes a request log line, it holds the request method, the path without the query string, the status code and the time taken. It does not hold the text you sent.
• To limit abuse, a tool keeps a count of requests per network address in memory. The count resets each hour and is lost when the tool restarts.
• Cloudflare and the hosting layer sit in front of the tools as they do for the main site. Their request logs may process network metadata, including the address requested.
• Cloudflare adds the same analytics script to tool pages. The tools’ content security policy allows scripts only from tools.vetslearn.com, so a browser that enforces that policy blocks it and it does not run. The scripts that do run on tool pages are files from tools.vetslearn.com.

Plain SAM and your SAM.gov key

Plain SAM searches SAM.gov with your own SAM.gov API key. The key is saved in your browser's storage on that page. On each search your browser sends it to our server in a request header, and our server passes it to SAM.gov to run the search. Our server does not log the key or keep it, and removes it from anything it caches or returns.

The server keeps a cache of SAM.gov results so a repeated search does not spend SAM.gov quota. The cache is keyed by the search filters, including any keyword searched, and not by your key. It holds public notice data. Cached entries older than seven days are not used.

What stays in your browser

Several tools save your work in browser storage on tools.vetslearn.com so it is there when you come back. That data stays on your device. It reaches our server only as part of a request you make by running the tool.

• Interview Coach: your recent practice history, up to 20 entries.
• OPORD Business Plan and Capability Statement: your draft.
• True Salary Calculator and Separation Countdown: your last inputs.
• Plain SAM: your SAM.gov key, eligibility profile, saved searches and certification checklist progress.
• First-Proposal Copilot: your company profile and past-performance references.
• The measurement preference described below.

The Federal Resume Converter does not save resume text in browser storage. Clear a tool's saved data with its own clear control where it has one, or by clearing site data for tools.vetslearn.com in your browser.

Measurement on the tools

Tool pages send first-party counts to the tools host itself, which relays them to api.vetslearn.com. A hit carries the page path without the query string and, for a pageview, the referring site's address without its path. The named counts are a tool run, a click out to another site and a click through to a VetsLearn lesson, each with the tool's short name. Nothing you type is sent, and the script does not read form fields, requests or results.

The relay passes your network address and browser user-agent to the API so it can compute the same daily rotating visitor hash used on the main site. The relay does not log or store them. These rows follow the retention rule below. The relay records only when a relay key is configured on both the tools host and the API. Without one, the hits are dropped.

Measurement on the tools is off when your browser sends the Global Privacy Control signal, or when you set “Measurement: off” in the footer of the tools hub. That setting is stored in your browser for tools.vetslearn.com and is separate from the control on this page.

Fonts and security headers

Fonts on both hosts are served from VetsLearn's own hosts. Pages on vetslearn.com load them from vetslearn.com, and tool pages load them from tools.vetslearn.com. No font request goes to Google.

The tools are served over HTTPS only. A content security policy limits scripts to files from the tools host. The pages send no referrer, so a site you click through to does not receive the address of the tool page you came from.

How long we keep things and how to delete

The unsubscribe link is in every email and it works the same day. After you unsubscribe we keep the address, marked unsubscribed, so it is not added again by mistake. Email us to have it removed.

Learning accounts (email, optional display name, supported completions and badges) remain until you delete the account or ask us to. You can delete it yourself: sign in, open your account page, type your account email in the Delete account section and confirm. Or email [email protected] from the address on the account and we will delete it for you.

Deleting an account removes the account email and display name, synced lesson completions, completion records and badges, sign-in sessions, pending sign-in links and the newsletter subscription under that account or email. Completion-record links you shared stop working. It cannot be undone.

Deleting an account does not remove progress saved in your browser. That stays until you clear your browser data. If you made a purchase in the past, we keep a record of it with your email removed. The amount, the date and the payment processor's reference remain. The payment processor keeps its own records under its own terms.

Expired sign-in links and expired sessions are removed daily. Raw pageview and event rows, from the main site and the tools, are deleted after 90 days. Daily totals, which carry no visitor hash, are kept. Measurement rows hold no email or account id, so we cannot find or delete rows for one person. We do not publish a fixed retention period for hosting or provider logs on this page; ask for the current handling before relying on the site for organizational use. Browser-local data, on vetslearn.com and on the tools, remains until you clear it.

Children

The curriculum is built for adult learners, primarily transitioning service members and veterans. We don't knowingly collect information from anyone under 16.

Changes to this policy

If we materially change how we handle data, we'll update this page and email current subscribers before the change takes effect.