The NCO Performance Tracker is a personal project operated by an individual NCO in a private capacity. It is not operated by the United States Army, the Department of Defense, or any government entity. See the Disclaimer for the full scope statement.
Contact for privacy questions or data requests: wsalazar@projectkratos.tech
The Tool only collects information the user types into the form and submits. It does not use tracking cookies, analytics beacons, advertising identifiers, or fingerprinting.
| Category | Examples | Source |
|---|---|---|
| Identification | NCO name, rank, squad/section, MOS, drill date | User-entered |
| Performance text | Free-text entries describing performance in the seven NCOER attribute areas | User-entered |
| Submission metadata | Server-side timestamp of each submission | System-generated |
| Draft backup | In-progress form data saved locally in the user's browser | Stored on user's own device (not transmitted) |
The Tool does not collect IP addresses, device identifiers, browser fingerprints, SSN, DoD ID numbers, home addresses, phone numbers, financial information, medical information, or biometric data.
Collected data is used only for the following purposes:
- AI Enhancement: When the user clicks "Enhance with AI," the specific field text plus the user's rank and MOS are sent to Google's Gemini API, which returns enhanced wording suggestions.
- PDF Generation: When a user selects "PDF Report" mode, the submitted text is rendered into a formatted PDF file stored in the operator's personal Google Drive. A shareable link is returned to the user.
- Performance Tracking: When a user selects "Direct Submission" mode, the submitted text is written as a row to a Google Sheet used by the operator for performance tracking and NCOER preparation support.
Data is not sold, rented, used for advertising, used to train AI models by the operator, or shared with any party other than the unavoidable third-party processors listed below.
To function, the Tool relies on the following third-party services, each subject to its own terms and privacy policy:
| Service | What It Processes | Provider Policy |
|---|---|---|
| Google Gemini API | Field text, rank, MOS — sent when user clicks "Enhance with AI" | policies.google.com/privacy |
| Google Apps Script | Routes all backend requests; executes on Google's infrastructure | policies.google.com/privacy |
| Google Drive | Generated PDF files (under operator's personal Google account) | policies.google.com/privacy |
| Google Sheets | Submitted form data written as rows (under operator's personal Google account) | policies.google.com/privacy |
| Hosting Provider | Serves the static HTML page to the user's browser | Subject to that provider's terms |
Once data is transmitted to Google, it is subject to Google's handling practices. The operator does not control how Google stores, processes, or retains that data beyond the account-level controls available in the operator's Google account.
Submitted data is retained indefinitely by default, for the purpose of longitudinal performance tracking and NCOER preparation support. However:
- Any user may request deletion of their submitted data at any time by emailing the contact address in §08.
- Deletion requests will be processed within 30 days of receipt and will include removal from the Google Sheet and deletion of any associated PDFs from Google Drive.
- Drafts auto-saved in the user's browser stay on the user's own device and are cleared when the user clears their browser data or manually resets the form.
The operator cannot guarantee removal from Google's own backups, logs, or retention systems — that is controlled by Google under their privacy policy.
Users may, at any time:
- Request a copy of all data the operator holds about them.
- Request correction of inaccurate data.
- Request deletion of all data associated with them.
- Withdraw from further use of the Tool at any time by simply not submitting.
- Clear locally-saved drafts by clearing browser storage for this site.
Requests should be sent to the contact address in §08. No justification is required.
All data transmission between the user's browser and the backend occurs over HTTPS. Backend data is stored within Google's consumer infrastructure under the operator's personal Google account, which is protected by Google's standard authentication and security controls including multi-factor authentication.
Despite reasonable efforts, no internet-connected system is 100% secure. Users should not submit classified, FOUO, CUI, or otherwise protected information through this Tool. See §04 of the Disclaimer for the full list of prohibited submissions.
Privacy questions, deletion requests, data access requests, and concerns about this policy should be directed to:
wsalazar@projectkratos.tech
Please include "NCO Tracker Privacy" in the subject line. The operator will respond within 7 business days and complete requests within 30 days.
This privacy policy may be updated from time to time. The effective date at the top of this page reflects the most recent revision. Material changes will be announced via the Tool's main page. Continued use after changes take effect constitutes acceptance of the updated policy.