Security & Privacy

How we handle service records

A service record describes someone's postings and deployments -it's personal, sometimes sensitive, and often covered by national Official Sensitive Personal markings. We treat it accordingly.

Before you purchase

  • ·Your draft lives only in your browser's local storage. Nothing is transmitted to us.
  • ·Closing the tab doesn't delete your draft -you can come back and finish it later on the same device.
  • · If you never check out, we never receive your data.

When you purchase

  • · Your postings are encrypted with AES-256-GCM before they leave the page, using a key that never appears in our database. Even a full backup would not expose the raw timeline.
  • · The record is then stored in an AWS database with AWS-managed encryption at rest (KMS) and TLS in transit.
  • · Payment is processed by Stripe -we never see or store your card.
  • · Unpaid drafts auto-delete after one hour.

Classified deployments

If a tour or mission is marked Classified, the animation shows a pulse off-globe -no arc, no anchored coordinate, no country name -and the viewer sees “Classified · Location withheld”. The duration is preserved; the location is not. Perfect for SF, intelligence, submariners, and anyone who'd rather not map where they actually were.

Your rights

  • · Ask us to delete your record at any time -emailprivacy@veteranwaypoints.com.
  • · Request an export of what we hold on you.
  • · Payment records are retained as required by UK / AU / US tax law (usually 7 years), but the service record itself can be deleted on request while retaining a minimal payment audit trail.
Last updated: April 2026