Privacy

Short version: we collect the least we can, we say exactly what it is, we never sell or share it, and you can ask us to delete it.

What we store

For an applicant: first name, last initial, email, password (hashed by our authentication provider), your recruiting office, your target test date, the MOS picks you choose, your answers and scores inside this course, and any real ASVAB or PiCAT scores you choose to add (self-reported, from your score sheet). A parent or guardian email is optional. When you join, we record when you acknowledged what your recruiter sees. We do not ask for date of birth, Social Security number, phone number or address.

Also for an applicant, when they apply:

For a recruiter: first name, last initial, rank, email, recruiting office and a callback number used only for approval.

Problem reports: when anyone reports a problem with a lesson or a question, we keep what they were looking at (the question, the choices and the explanation), what they wrote and their language. For a signed-in user the report is linked to their account; for a visitor who is not signed in we keep a short code made from their IP address and browser, only to limit reports to 25 a day. Each report is also emailed to our contact inbox so we can fix it.

Lesson reminders, only if you turn them on: your phone's push address (issued by your browser's push service, Google or Apple) and its time zone, kept with the site host (Netlify). The reminder text names your next lesson and goes through that push service. Turn reminders off and the address is deleted.

A log of account actions (for example: joined, approved, scores entered, an encouragement email sent) is kept so we can see what happened when something goes wrong.

Visits to the site

We count visits so we know whether the course reaches recruiting offices and applicants. We do it ourselves, without cookies and without any third-party analytics script. For each page view the site sends the page's address, the name of the site that linked to it (for example "facebook.com", never the full address), the link tag in the address if there is one (?rs=, which tells us which flyer, post or card was used) and your language setting. Our host adds the type of device (phone, tablet or computer), an approximate region from your IP address (state and country) and the hour.

To tell new visitors from returning ones, your IP address and browser are turned into a short one-way code (a hash) that cannot be turned back into either. Your IP address itself is not stored. These counts are kept as daily totals with our host (Netlify), and only the site owner sees them, on the admin statistics page. Automated visitors (search engines, link previews) and the site owner's own browser are not counted.

Your browser also keeps a few small settings on your own device, never sent to anyone else: your language choice, the link tag that first brought you, and your sign-in session.

Who sees it

You see your own data. When you join with a recruiter's code, that recruiter is named on the join step with their office, and the same line is shown there: your recruiter will see your progress: benchmark, mock tests, lessons and study time, estimated line scores as ranges, MOS picks, your APT and English check results, and any real scores you add. They also see your name, email and target test date (and a parent email, if you add one), and can email you encouragement. Your profile page shows which recruiter that is.

The site owner (one person) can see everything, to run the service, measure how accurate the score estimates are, and prepare statistics about the course as a whole (for example, how many lessons applicants passed or how many hours they studied). Statistics shared outside the course, such as with a recruiting office deciding whether to use it, are totals and averages that never name an applicant. Nobody else sees your data. There are no advertising trackers and no third-party analytics scripts. We never sell or share it.

Minors

Applicants may be 17. The enrolling recruiter is the responsible adult for the enrollment; a parent email, when given, receives the same milestone notices the applicant gets.

Deletion

Ask your recruiter or write to contact@mail.recruitmissioncontrol.com and the account and its data are deleted within a week, including study time and APT scores. Aggregate, de-identified statistics (for example, average score gains or daily visit totals) are kept.

Where it lives

Data is stored in a dedicated database (Supabase, United States region) separate from any other product. The site, the visit counts and the reminder addresses are kept by Netlify. Email is sent through Resend.