Privacy Policy

Last updated: 29 September 2026

GarrisonActual (“we,” “us”) operates the GarrisonActual platform and the garrisonactual.com website. We are based in the State of Michigan, USA. This policy explains what we collect when you use the platform and how we use it.

Information we collect

Your account. Your email address and password (handled by our authentication provider), and the display name, username and timezone you set.

What you and your unit create. Rosters, personnel records, operations, documents, forum posts, messages, uploads and unit websites. A unit’s content is visible to that unit’s members according to the unit’s own settings, and a unit’s public website is visible to anyone.

The public unit directory, if your unit is listed. When a unit's leadership lists it in the directory, anyone can see its name, logo, tagline, games, the number of members serving, how many operations and training events it held in the last 30 days, whether it is recruiting, and the details it enters for its listing (region, platforms, playstyle, schedule, language). No member's name or account is shown there.

Discord, if you link it. Your Discord user ID, so your unit can sync roles and post announcements.

Steam, if you link it. Your Steam account ID, confirmed through Steam’s own sign-in page. Only our platform team can see it.

Where you sign in from. When you create your account and each time you sign in, we record the IP address, the country and region it belongs to, and your browser type. We use this to keep accounts secure: to spot stolen or duplicate accounts and to stop automated sign-ups. Only our platform team can see it, and IP addresses are deleted after 90 days; the country is kept.

Billing, if your unit subscribes. Payment is taken by Stripe on its own checkout page. We receive the subscription status, not your card number.

Error reports. When something breaks we receive a report of the error, and for some sessions a replay of the page, to help us fix it.

How we use it

To run the platform for you and your unit; to send the emails the platform generates (for example enlistment decisions, promotions and leave decisions); to bill subscriptions; to protect accounts and the platform from abuse; and to find and fix problems. We do not sell your data.

AI features

Some tools draft text for you (for example orders, after-action reports, intel and wiki answers). When you use one, the unit content it needs is sent to our AI provider, Anthropic, to produce the draft.

Data sharing

We share information only with service providers that help us operate, and only as needed to deliver the service: Vercel (hosting), Supabase (database, authentication and file storage), Resend (email), Stripe (payments), Sentry (error monitoring), Anthropic (AI features) and Discord (only if you link it). We may disclose information if required by law.

Retention & your rights

We keep your account and your unit’s content while the account and unit exist. You have the right to access or delete your information. To exercise these rights, contact us at privacy@garrisonactual.com. We will delete your account on request. A unit’s own record of your service with it (your callsign and service history on its roster) belongs to the unit and stays there, no longer linked to any account.

Security

Each unit’s data is kept separate from every other unit’s, and access within a unit follows the permissions its command sets. No method of transmission or storage is perfectly secure, but we take reasonable measures to protect your information.

Changes & contact

We may update this policy; material changes will be posted here. Questions: privacy@garrisonactual.com.