Privacy notice

What is collected, what is not, and what is never sold

This is the notice Nevada law requires of a commercial website — NRS 603A.340 lists what it must contain, and each item is answered below. It is short because the honest answers are short.

It covers the public pages of 38CFR.com and the application at 38cfr.com/app. Back to the homepage.

Who this notice is from

The operator of 38CFR.com — the website you are reading and the application behind it — makes this notice available under NRS 603A.340. “Covered information” is Nevada's term, defined at NRS 603A.320, for personally identifiable information collected through a website: a first and last name, a home or other physical address, an e-mail address, a telephone number, a Social Security number, any identifier by which a person can be contacted, and any other personal information kept alongside one of those.

What the operator does not collect

The public pages of this site — this page and the homepage — set no cookies, run no analytics, and load nothing from another host: every style and image is served from this site itself, and no executable script runs on either page (the homepage carries one inert block of structured data for search engines, which executes nothing and collects nothing). The operator does not collect covered information from a visitor who only reads them.

Named rather than implied, because an absence is easy to imply away: there is no analytics identifier, no advertising identifier, no tracking pixel, no tracker of any kind, no social-media button and no fingerprinting script anywhere on this site. The application sends no usage statistics to its software's maker either — that reporting is switched off in its configuration.

Categories of covered information collected

The application stores what a signed-in firm enters, and what a client or family member with a portal code sends in for that firm's review. In the statute's categories, that can include:

  • first and last names;
  • home or other physical addresses;
  • e-mail addresses — one also identifies each account that signs in;
  • telephone numbers;
  • Social Security numbers;
  • other identifiers by which a person can be contacted; and
  • the case information kept with them — claims, decisions, medical and service records, deadlines, filings and messages.

Nothing in that list is collected from anybody who has not signed in or used a portal code. The site has no mailing-list box, no contact form and no comment field.

Categories of third parties covered information may be shared with

One category: infrastructure hosting. The servers this site runs on are Amazon Web Services machines, so covered information rests on that provider's infrastructure — a hosting subprocessor, processing on the operator's behalf. Each firm's records rest there encrypted under keys the firm itself holds, so the host stores what it cannot read.

There is no other category. No data broker, no advertiser and no analytics provider receives covered information, because none is involved.

Where a firm directs a filing or a records request, the documents go where the firm sends them — to the Department of Veterans Affairs, for example. That is the firm acting for its own client, at the client's direction; it is not the operator sharing information.

How you review and request changes

  • A signed-in firm can read and change everything it has entered, directly, on the screens where it entered it.
  • A client or family member with a portal code sees their own case — and only their own case — and sends corrections through the portal. Nothing changes until a person at the firm reads and accepts it, so the file is never quietly altered.

Everyone whose covered information the operator maintains came in through one of those two doors, and the door you came in through is the way to review and request changes to what is behind it.

No sale of covered information

The operator does not sell covered information. It never has, and no part of how this product earns its keep involves doing so — the homepage's pricing sentence is the whole business model.

NRS 603A.345 nonetheless entitles any consumer to direct an operator, by verified request, to make no sale of covered information about them, and NRS 603A.325 permits a website to serve as the designated request address for submitting one. This website is that address: a signed-in firm may submit the request from inside the application, and a portal-code holder may send it through the portal's message thread. It will be answered within the sixty days the statute allows — and the answer will not change anything, because there is no sale to stop.

Third parties watching you across websites

NRS 603A.340(1)(d) requires this notice to say whether a third party may collect covered information about your online activities over time and across different Internet websites when you use this one. None may. There is no advertising network, no analytics script, no social-media button and no content embedded from another host anywhere on this site — nothing a third party could collect with.

How material changes to this notice are announced

A material change is announced on this page itself: the changed notice is published at this same address with a new effective date, and a note at the top of it says what changed and when. This notice is never reworded silently.

Effective date

This notice took effect on 28 August 2026.

Every section number cited above was read from the Nevada Legislature's published text of NRS chapter 603A, at leg.state.nv.us, on 28 August 2026 — read, not recalled, which is this project's rule for every legal citation.