Privacy Policy

Information We Collect

Army Grad Week needs very little and does not require an account or password. Normal page requests provide our hosting, analytics, and error-monitoring services with the technical data described below. Graduation choices are kept in the page URL and your browser storage rather than in a personal account. Like any requested URL, the URL is sent to our hosting provider when the page loads, can remain in browser history, and can be read by anyone with whom you share it.

When you use the “Email me reminders” feature, you give us your email address, the post your Soldier is at, and the graduation or ship date you entered. We also receive the current plan URL and any training-track selection it carries so the reminders can return you to the right plan. See “Data Retention” below for what we store and for how long.

How We Use Your Email

The email you provide through the reminder form is used for two things:

1. Confirmation. A single email when you sign up, confirming the post and graduation date we have on file.
2. Up to four reminders before graduation. If you sign up six or more weeks ahead, short emails go out at 6 weeks, 2 weeks, 1 week, and 1 day out. Each covers one logistics topic (hotels, rental car and packing, gate and weather check, day-of arrival). Unsubscribe anytime from the link in the footer of every email. Unsubscribes take effect immediately for whatever reminders are still scheduled.

If you edit your plan after subscribing, the site uses the random plan-update token stored in your browser to send us the updated plan URL, post, graduation date, and training track. This keeps later reminders aligned with your current plan without requiring an account.

We do not sell your email or add it to unrelated mailing lists. Reminder messages can include travel-planning links and may direct you to pages containing the affiliate links described below. We disclose your email to the email-delivery and infrastructure providers named below only as needed to operate reminders.

Family Stories Submissions

If you submit to Family Stories, you choose what to share. A submission can include your display name, your relationship to the soldier, the graduation date and Army base, your story, and optionally a photo, a short tip, a hometown (city only), a title, a unit, and a star rating. We also collect your email address and, if you add one, a private note to our team.

Every submission is reviewed by a person before anything is published. If we approve it, the public parts (your display name, your story, your photo, and any optional details listed above except your email and private note) appear in the public Family Stories gallery and may be indexed by search engines. Your email address is never published. We use it only to contact you about your submission and to send you a private removal link. Your private note to our team is never published and is used only to help us review your story.

Photos are stored on our media host and may be lightly resized or color-adjusted for display. We record which version of the submission terms you agreed to, as a consent record.

For safety and abuse prevention, and to meet our legal obligations, we also record technical information with each submission: the IP address and browser (user-agent) it was sent from, and timestamps. This information is never published. We use it to prevent spam and abuse, and, if a submission contains content we are legally required to report (such as apparent child sexual abuse material), to include in a report to the National Center for Missing & Exploited Children (NCMEC) and to law enforcement as required by U.S. law (18 U.S.C. § 2258A). This technical information is deleted when you remove your story, except where we are required to preserve it for such a report.

You can remove your story at any time using the private removal link in the email we send you. After you click the removal link, your story comes off the gallery and the photo is deleted from storage within a few hours (processed by a background job, not instant). If you need it taken down urgently, email privacy@condedigitalsolutions.com and we will act as quickly as possible.

There are two levels of removal. Self-service removal (using the link in your email) takes the story down and deletes the photo, but retains a minimal record so our systems can recognize if the same story is resubmitted. Full erasure goes further: it also removes your email address and any index keys from our records. You can request full erasure by checking the “erase all my data” option on the removal page, or by emailing privacy@condedigitalsolutions.com.

Erased data may persist in private 30-day operational backups used only for disaster recovery, not routine processing. Access is restricted, and backup copies expire through the regular 30-day backup cycle.

Family Stories submissions are for adults 18 or older. Please do not submit a story or photo if you are under 18.

Third-Party Services

The services we use to run Army Grad Week:

• Cloudflare: hosts the site (Cloudflare Pages) and runs the email service (Cloudflare Workers). Cloudflare may collect standard web analytics like IP and page views. See Cloudflare’s Privacy Policy (opens in new tab).
• Resend: delivers the email reminders. Your email is transmitted to Resend solely for delivery. See Resend’s Privacy Policy (opens in new tab).
• CJ (Commission Junction): powers Booking.com hotel links for eligible properties. When you click one, CJ may process pseudonymous information such as your IP address, browser or device details, referring page, click time, and a cookie or similar identifier for attribution and reporting. Booking.com’s commission-eligibility window for this program is session-only, while CJ’s own processing and retention are governed by its privacy notice. See CJ’s Privacy Policy (opens in new tab).
• Travelpayouts: provides the affiliate network behind our Discover Cars rental links. When you click a rental link, Travelpayouts may receive referral and technical information and use cookies or similar identifiers for attribution. See Travelpayouts’ Privacy Policy (opens in new tab).
• Booking.com: provides the hotel search and reservation service reached through our CJ and Stay22 links. After you leave our site, Booking.com may receive referral information and collect device, browser, usage, and reservation data under its own policy. See Booking.com’s Privacy Notice (opens in new tab).
• Discover Cars: powers car-rental affiliate links. When you click a rental link you’re sent to Discover Cars, which may set cookies for attribution. See Discover Cars’ Privacy Policy (opens in new tab).
• Amazon: some packing-list items link to Amazon. Those links are only affiliate-tagged when an Amazon Associates account is configured; otherwise they are ordinary untagged links. Amazon may set cookies on amazon.com under its own policies. See Amazon’s Privacy Notice (opens in new tab).
• Stay22: powers hotel links that are not routed through CJ and provides the embedded hotel map. Stay22 may collect technical, referral, and booking information and use cookies or similar technologies when its map or booking links load or are used. See Stay22’s Privacy Policy (opens in new tab).
• National Weather Service (api.weather.gov): provides weather forecasts through a request made directly by your browser. This is a US Government service, not a commercial vendor: the data is a public-domain government work, free to use, with no account, key, or tracking on our side. The request includes the public coordinates of the selected Army post and normal connection data such as your IP address and browser details, but we do not send your name, email, or plan data. See weather.gov’s Disclaimer (opens in new tab).
• Plausible Analytics: privacy-friendly site analytics. We configure Plausible for aggregate, cookie-free measurement and do not use it to build individual visitor profiles. Plausible processes the technical request data needed to produce those statistics under its own policy. See Plausible’s Data Policy (opens in new tab).
• Sentry: watches for application errors so we catch broken pages fast. When an error happens, Sentry may collect technical context like browser type, OS, and the error stack. No personally identifiable information is intentionally collected. See Sentry’s Privacy Policy (opens in new tab).
• Journey analytics (Cloudflare and Google Sheets): when enabled, this helps us understand which features visitors use and in what order. Each browser tab gets a random ID. Events include that ID, page path (not its query string), device type, event name, an external referrer when available, and a short value such as a hotel or base code. We do not put your name, email, confirmation numbers, or full plan URL into this system. Event data is stored in a private Google Sheet accessible only to our team. See Google’s Privacy Policy (opens in new tab).

Cookies and Tracking

Army Grad Week does not set advertising or tracking cookies of its own. Plausible is cookie-free. If session storage is unavailable during a broken site update, we may set a strictly necessary cookie named chunk-reload-<build> for up to 60 seconds. It stores only the value 1 and prevents a reload loop; it is not used to identify or track you. Three pieces of state live in your browser’s localStorage, all site-prefixed so they can’t collide with anything else:

• agw_base: remembers which Army post you last picked, so the homepage offers a one-click shortcut back. Storing this is optional; clearing your browser storage clears it.
• army_plan_token: a random ID that ties your browser to your subscription record so you can update your plan later without signing in. The ID is not linked to your name or email on its own; only our subscriber records can connect it. Clearing your browser storage removes it.
• agw_plan_date: remembers the last graduation date and post you selected so a parameter-free plan visit can offer to restore it. The URL remains the source of truth, and expired dates are not restored.
• agw_plan_progress: remembers which posts you have started a plan on and when, so the homepage offers to resume the post you are actually working on rather than the last one you happened to look at. It holds post names and timestamps only, never your selections themselves. Clearing your browser storage clears it.

When journey analytics is enabled, its random ID and deduplication state live in sessionStorage and are erased when you close the tab. The system is not designed to identify you and does not receive your name, email, URL query string, or confirmation numbers. Add ?notrack=1 to a page URL to disable journey tracking for that visit.

Third-party affiliate services (Stay22, CJ, Booking.com, Travelpayouts, Discover Cars, and Amazon) may use cookies or similar technologies after you follow an affiliate link or when an embedded Stay22 map loads or is used. Merely browsing our hotel cards or adding a hotel to your plan does not create a CJ or Stay22 affiliate click. Booking.com’s commission- eligibility window for our CJ-powered links is session-only, while CJ may separately process and retain pseudonymous click and transaction data as described in its privacy notice. The other services’ practices are governed by their policies linked above.

Data Retention

To operate the countdown emails we store, per subscriber:

• a one-way hash of your email address (the storage key; we don’t index by plaintext email)
• your email address (the value, needed to actually send the email and not searchable by key)
• the Army post and training track you selected, when provided
• the ship or graduation mode and date you entered, plus the computed ceremony dates
• the current plan URL so reminder links return you to the saved date and hotel selection
• timestamps for subscribe, unsubscribe (if applicable), plan updates, and each email we’ve sent you
• a random unsubscribe token unique to your record
• a random plan-update token and its lookup index so your browser can update the plan without an account
• delivery state used to avoid duplicate reminders and manage a dateless signup

If you unsubscribe, we flag your record and stop sending. The record stays so a later re-subscribe with the same email knows which reminders you’ve already received. To request a full deletion, email privacy@condedigitalsolutions.com and we’ll process within 30 days.

Our email-delivery provider (Resend) retains transactional delivery logs under their own retention policy.

When enabled, the journey analytics event data described above is kept in a private spreadsheet. It does not include names, email addresses, URL query strings, or reservation confirmation numbers.

Your Rights

Depending on where you live, you may have rights under the California Consumer Privacy Act (CCPA), the General Data Protection Regulation (GDPR), or similar laws, including the right to access, correct, or delete personal information.

The most common request is deletion. To delete your subscriber record (email, post, training track, dates, plan URL, timestamps, delivery state, and tokens), email the address below. We’ll process within 30 days. Clicking the unsubscribe link in any email flags your record so we stop sending; full deletion is a separate request.

If you submitted to Family Stories, your deletable data includes: your story text, photo, display name, hometown, the email address on the story record, and your removal token. You can delete your story yourself using the private removal link in the email we sent you. For full erasure (removes your email and all index keys, not just the story), use the “erase all my data” option on the removal page, or email privacy@condedigitalsolutions.com. We will process full erasure requests within 30 days. Erased data may remain in private operational backups for up to 30 days before those copies expire through the regular backup cycle.

CAN-SPAM Compliance

The reminder emails from Army Grad Week comply with CAN-SPAM:

• every email identifies Conde Digital Solutions LLC as the sender
• every email includes our physical mailing address
• every email carries a working unsubscribe link and honors Gmail and Apple Mail’s built-in unsubscribe button (RFC 8058 List-Unsubscribe header)
• unsubscribes take effect immediately for any remaining scheduled emails

We send only the confirmation and reminder series you request. Those reminders can include travel-planning links and may lead to pages with affiliate links. If you receive anything outside that series, report it to privacy@condedigitalsolutions.com and we’ll figure out what happened.

Children’s Privacy

Army Grad Week is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we’ll delete it.

Changes to This Policy

We update this policy now and then. Changes are posted here with the date at the top. Continued use of the site after a change means you accept the updated policy.

Contact

For privacy questions or deletion requests:

Conde Digital Solutions LLC
Email: privacy@condedigitalsolutions.com
General contact: hello@armygradweek.com