Legal

Privacy Policy

Last updated 2026-07-14. Effective upon publication.

Draft — pending legal review. This document is a working draft prepared as a starting point. It has not yet been reviewed by counsel and will be finalized before any commercial launch.

This Privacy Policy describes how Virtus Formation (“Virtus,” “we,” “us”) collects, uses, and shares information when you use our website, courses, and related services (the “Services”). Our rule is simple: collect what the work requires, nothing more, and say plainly what that is.

1. Information We Collect

We collect the following categories of information:

Account information — your name and email address when you create an account or join a list. If you tell us who you are — a parent, a student, a mentor — we keep that so we send you the right things. When a parent and student link their accounts, each account records the other’s email address.

Payment information — handled by Stripe. Card numbers never reach our servers; we receive confirmation of payment and basic billing details.

Program data — course progress, submitted assignments and their grades, and quiz results tied to your account when you are signed in. Notes you write in the notebook are not surfaced to parents, instructors, or other members anywhere in the product. Submitted assignments and grades are visible to a linked parent account — that is the grade book working as intended.

Communication — messages you send through our help form or in reply to our email.

How you found us — when you sign up or make a purchase, we record the link or campaign that brought you here. Until that moment, this memory lives only in your own browser.

Technical data — standard server logs (IP address, browser type, pages requested) kept by our hosting provider, and, on some form submissions, a one-way hashed form of the IP address used to prevent abuse.

2. How We Use Information

We use your information to:

— Provide the courses, resources, and community you signed up for.

— Send the email you asked for: receipts and course email always; marketing email only with your consent, with an unsubscribe link in every one.

— Show a linked parent their son’s coursework and grades.

— Understand aggregate usage — which pages, quizzes, and lessons serve people — so we can improve the work.

— Respond to support requests.

— Meet legal obligations and protect the safety of our members.

3. Service Providers

We share information with a small set of vendors who help us operate the Services — each receives only what its job requires.

Supabase — database, authentication, and session management.

Stripe — payment processing.

Resend — email delivery.

Mux — video hosting and delivery for course lessons.

Vercel — website hosting and privacy-first, aggregate analytics.

Discord — our community space. It is an external service; when you join, Discord’s own terms and privacy practices apply.

Sign-in providers — such as Google, only if you choose to sign in with them.

We do not sell your personal information — not to advertisers, not to data brokers, not to anyone — and we do not share it for targeted advertising.

4. Cookies and Tracking

We use first-party essentials only. A session cookie keeps you signed in. If you take the short questionnaire on our Begin page, an anonymous first-party cookie holds your answers together. Your browser also stores your theme preference and how you arrived at the site; the latter is sent to us only if you sign up or make a purchase.

Our analytics are cookieless and aggregate — we see crowds, not people. We count a handful of anonymous moments, such as quiz completions, with no identifier attached. We do not use third-party advertising trackers, advertising pixels, or session recording, and we do not track you across other websites. There is no cookie banner on this site because nothing here requires one.

5. Your Rights

Whatever your jurisdiction, we honor these requests:

— Access the personal information we hold about you.

— Correct what is inaccurate or incomplete.

— Delete your account and its data.

— Receive a copy of your data.

— Object to a processing activity.

To exercise any of these, reach us through our help page. We respond within 30 days.

6. Children and Families

The Services are built for young men 15 and older, and for their parents. Creating an account requires that you are at least 13; account holders under 18 must have a parent or guardian’s permission. We do not knowingly collect personal information from children under 13 — if you believe we have, contact us through the help page and we will delete it promptly.

Where a parent and student link accounts, the parent sees coursework, submissions, and grades.

7. Data Security

Connections are encrypted (HTTPS). Authentication and data storage run on Supabase with row-level access controls, and payment details never touch our servers. Access to production data is limited to the people who operate the service and is used only to run it.

No system is perfectly secure. We take reasonable administrative and technical measures, and if a breach affects your data, we will tell you.

8. Data Retention

We keep account and program data while your account is active, and afterward only as long as legal, tax, and accounting obligations require. You may request deletion at any time. Aggregate counts that identify no one may be kept indefinitely.

9. International Transfers

We are a United States operation, and our service providers store and process data in the United States. If you use the Services from elsewhere, your information will be transferred to and processed in the United States.

10. Changes to This Policy

We may update this policy as the Services grow. Material changes will be announced by email to the address on your account, and the date at the top of this page always reflects the current revision.

11. Contact

Questions about this policy or our data practices should be directed to:

Virtus Formation

Help & Support — the help form on this site

PO Box 1706, Truckee, CA 96160