Privacy Policy

WOFT — Where Our Families Train (“WOFT,” “we,” “us”) provides real-world defense and preparedness training from our private facility. This policy describes how we collect, use, and protect information when you use woft.com, contact us, join a waitlist, book training, shop our store, or donate to WOFT Charities.

Information you give us. When you submit an inquiry, join a waitlist, request free learning access, or book training, we collect the details you provide — typically your name, email address, phone number, organization, and your message.

Purchases. Training bookings and merchandise checkout are processed by Shopify. WOFT does not receive or store your payment card details; Shopify's privacy policy governs payment processing.

Donations. Donations to WOFT Charities are processed by GivePayments. WOFT does not receive or store your payment card details for donations.

Automatically. Our site stores a small amount of data in your browser to make features work — your light/dark theme preference and your Training Simulator progress. These functional preferences stay on your device. We do not use advertising trackers on this site.

Optional website analytics. If you accept optional analytics, we use Vercel Web Analytics for page visits, simulator module views, exercise starts, completions and final scores, training-booking clicks and accepted guide requests. Our separate first-party analytics, stored in Supabase, measures page visits, time actively spent on the site, video starts, actual viewing time, progress and completion, and clicks to our store. Campaign labels and the referring site help us understand which promotions bring visitors. A store click is not a purchase. Random browser and session identifiers in our first-party analytics distinguish consenting activity; they do not tell us your name. When analytics is allowed, campaign labels may accompany links to our Shopify store to help attribute promotions. We do not collect form contents, full referring URLs, or private watch-link tokens in analytics.

Optional anonymous analytics is stored separately from inquiry and account records. We do not connect that anonymous browsing history to your inquiry. A shared browser or forwarded link does not establish who personally watched a video.

Version 3 requires a new choice; an older visit-sharing choice does not enable the new source observation. If you separately choose Allow this visit under Optional visit sharing, we start a new visit record for this browser for up to 30 minutes. If you then submit an inquiry with its optional visit-sharing box selected, we can include the pages and videos viewed and observed active time with the email address you submit. At the moment you allow sharing, we also record the known public page where you opted in and, if available, an allowlisted public referring-site hostname. We discard the referring URL, path and query; missing or excluded referrers are Unknown, not Direct. This is a browser-reported observation at consent, not the first arrival or proof of how you found WOFT. Existing anonymous analytics consent does not enable this feature, and older browsing history is not linked retrospectively.

This shows what a consenting browser reported, not proof of a person's identity, ownership of an email address, attention or an exact viewing duration. Shared devices, other browsers and visits after this session expires cannot be reliably connected by this setup. We do not use fingerprinting, IP matching or personal information in tracking links to fill those gaps.

The browser reference is a secure first-party cookie, separate from anonymous analytics identifiers. Event data and the inquiry link are retained for up to 30 days; expired records are excluded from reports even if physical cleanup is delayed. Turn off Optional visit sharing to stop future collection and exclude the visit from new reports. Contact info@woft.com for deletion assistance.

Visit sharing is optional. It does not change your marketing preferences, require an account or prevent contacting us, browsing or purchasing. This website inquiry feature does not automatically identify Shopify visitors or establish a Shopify purchase.

A personal video link may contain a random code for its intended recipient, without a name or email address in the link. If you allow analytics, matching video plays, timestamps, observed viewing time and progress may be associated with that intended recipient for private review. A page visit or email click is not proof of watching. Shared or forwarded links do not verify who actually watched. Declining analytics leaves video access available. These links expire within 90 days; we do not automatically send follow-up messages from viewing activity.

Our two free PDF guides require a verified email address; your first name is optional. The training simulator can be played without an email or sign-in. Simulator scores are stored locally on your browser, not in an email-linked account. We email a one-use verification code and use essential secure cookies to keep you signed in on that browser. These access cookies are separate from optional analytics. We keep verification request and preference records to operate access and limit abuse.

Training emails are optional and are not required for free access. Leaving the training-email box unchecked does not remove a subscription you already have. An explicit checked choice is submitted to our WOFT training-email subscription after your email is verified.

We use the information you provide to:

• Respond to inquiries and route them to the right WOFT team
• Email the free PDF guides you request
• Schedule, confirm, and deliver training you book
• Send training dates, preparedness resources, and program updates you signed up for — every email includes an unsubscribe option
• Operate school and training-program waitlists
• Meet legal, safety, and record-keeping obligations

We do not sell your personal information.

We share information only with service providers who help us operate — such as Shopify (checkout), GivePayments (donations), our email provider Resend, our website host, Supabase for website records and authentication, and HubSpot for contact and subscription records — and when required by law. Native videos are served by our website host or Shopify; selected testimonials use YouTube when you open them. Those providers operate under their own privacy policies.

Analytics is off until you opt in. Use Analytics preferences to decline or withdraw at any time. Withdrawal stops future analytics and clears the analytics browser/session identifiers. We honor Global Privacy Control and Do Not Track signals by keeping optional analytics off. Declining does not prevent browsing, playing videos, contacting us, or purchasing training. Existing records are not automatically erased by clearing browser identifiers; contact us for deletion assistance.

You can opt out of marketing email at any time via the unsubscribe link in any message. To access, correct, or delete personal information we hold about you, email info@woft.com and we'll respond within a reasonable timeframe.

Our website is not directed at children under 13, and we do not knowingly collect personal information from them online. Youth training programs are arranged by parents, guardians, or schools.

We use reputable providers and reasonable safeguards to protect the information we hold, and we keep it only as long as needed for the purposes above or as required by law. No method of transmission or storage is 100% secure.

Detailed first-party analytics events and personal-link associations are excluded from our reports after 90 days. Vercel Web Analytics has a separate reporting window under our hosting plan. Older records are removed in bounded cleanup during successful collection; removal can be delayed when there is no traffic or a cleanup backlog. Inquiry and booking records have separate operational retention requirements.

We may update this policy from time to time; the date above reflects the latest revision. Questions? Contact us at info@woft.com — WOFT.