Privacy Policy

1. Introduction

ES Designs (“we,” “us,” or “our”) is an independent studio that builds applications for Meta Quest and operates the website esdesigns.org. This privacy policy explains how each of our applications, and this website, handles your data.

This policy applies to:

• Thrustline: a VR racing game for Meta Quest, powered by your workout on a cardio machine
• Vantura: a 360 video platform for higher education and CTE, made up of a Quest app and an instructor web portal
• Anatomy & Physiology Lab: an immersive VR educational experience for Meta Quest
• Document Ally Pro: a web app at documents.esdesigns.org that turns PDF and Word files into accessible documents
• esdesigns.org: this website, including its contact forms and email signups

These differ significantly in how they handle data. Thrustline and the Anatomy & Physiology Lab need no account and send nothing to us; what Thrustline saves stays on your headset. Vantura is an account-based service that a school uses to deliver its own video to its own students, so it necessarily stores account and usage information. Document Ally Pro is also account-based and keeps records of the documents you process, but not the documents themselves. This website uses analytics and stores what you send through its forms. Each is described separately below. We never sell personal information, and we never use it for advertising.

2. Thrustline

Thrustline collects no personal information and sends nothing to ES Designs. It has no account, login, or registration, never asks for your name, email address, age, or weight, contains no advertising, and uses no analytics service. Its own code makes no network requests.

To keep your progress between sessions, Thrustline saves the following in its private storage on your Meta Quest:

• Your settings: music, volume, comfort vignette, and whether ghosts are shown
• Your coins, the bikes and paint finishes you have bought with them, and your progress against the in-game rivals
• Machine profiles: the movement pattern of your machine (for example the rhythm and size of an elliptical stride or a rowing stroke), measured during calibration so the game can read your effort
• Race records: the date and time, course, difficulty, machine profile, lap times, coins collected, distance, speed, effort levels, time spent flying, and estimated calories for each race
• Ghost lines: the path your bike took in a race, saved ten times a second as a position and direction, so you can race against your own best runs
• Lifetime totals, such as distance and estimated calories

This data is stored only on your headset. It is never transmitted to us or to any third party, and Thrustline excludes it from Android device backups.

Calorie figures are an estimate calculated from your effort relative to your own calibrated pace. Thrustline does not ask for your weight, age, sex, or heart rate. It is a game, not a medical or fitness measurement device.

The named rivals you race against are recordings of laps ridden by the developer, included in the app. Thrustline does not download, share, or use any other player’s data.

In Thrustline, Settings › Reset deletes your race records, ghost lines, stats, and course progress; it keeps your coins, bikes, machine profiles, and settings. Uninstalling Thrustline removes everything it has saved. Because we never receive any of this data, there is nothing for us to delete on our side.

Thrustline is sold through the Meta Horizon Store. Meta processes the payment and manages your purchase. The app may ask Meta’s platform to confirm that your account owns Thrustline; that check takes place between the app and Meta, and we do not receive your Meta account details or payment information.

3. Vantura

Vantura lets faculty upload 360 videos they have filmed and deliver them to Quest headsets their institution already owns. It requires an account, and it communicates with our servers. This section describes exactly what that involves.

Signing in to the Vantura portal or the Quest app requires an ES Designs account. We store your email address, an account identifier, and your role (student, instructor, or administrator). Authentication is handled by Supabase. We do not store your password; it is held by our authentication provider in hashed form and is never visible to us.

Instructors create classes, and students join them with a short join code. We store which classes exist, who teaches them, who is enrolled, and when they enrolled. This is what determines which videos a given headset is allowed to download.

When a headset is paired to an account, the Vantura app reports information about that headset so an instructor can confirm a cart is ready before class:

• A device identifier generated by the app
• The headset model (for example, “Oculus Quest 3”)
• The installed app version
• Available free storage space on the headset
• Which lesson videos are currently downloaded, their size, and when they downloaded

We do not collect headset serial numbers, advertising identifiers, or any Meta account information.

When a video is watched in the Vantura app, we record a session containing which video was watched, the class it belongs to, when viewing started and ended, how long it was actually playing, the headset model, and the app version. Time spent paused is excluded from the recorded duration.

This activity is tied to the signed-in account, and an instructor can see it for their own class. It exists so faculty can tell whether students completed an assigned lesson. It is not used for profiling, advertising, or any purpose beyond reporting to the instructor and the institution.

Videos uploaded by faculty are stored in Cloudflare R2 object storage, along with a title, description, and technical details such as duration, resolution, and codec. Access is granted through short-lived signed links issued only to accounts enrolled in the relevant class. The institution owns this content; we host and deliver it on the institution’s behalf.

Vantura is download-first, so lessons play without a network connection. Downloaded video files and a copy of the class lesson list are stored in the app’s private storage on the headset, along with the sign-in tokens that keep you logged in. Signing out or uninstalling the app removes them from the device.

4. Anatomy & Physiology Lab

The Anatomy & Physiology Lab collects no personal information. It requires no account, login, registration, or email address, makes no network requests, and does not communicate with any external server, API, or third-party service.

It keeps quiz progress in session memory only. Nothing is written to your device’s storage, and when you close the app, all session data is cleared automatically.

5. Document Ally Pro

Document Ally Pro, at documents.esdesigns.org, turns PDF and Word files into accessible documents. It requires an account, and it communicates with our servers and with an AI provider. The contents of your documents are not stored on our servers.

You create an account with your email address and a password, or sign in from the ES Designs course platform. Authentication is handled by Supabase; we never see your password, which is stored in hashed form. If your account belongs to an organization account, such as your college’s, we store which organization you belong to and your role in it. The sign-in and sign-up pages use Cloudflare Turnstile to screen out automated abuse.

When you upload a PDF or Word file, its text is extracted in your browser, including any OCR of scanned pages. To remediate the document, the extracted text, plus small image thumbnails where alt text is needed, is sent through our servers to our AI provider, Anthropic. The remediated document is then assembled into Word, tagged PDF, and HTML files for you to download. When a tagged PDF is produced on our servers, it is generated in memory and not kept.

Anthropic receives only the document content needed for remediation: not your email address, your organization, or your other documents. Anthropic does not use content sent through its API to train its models.

• For each document you check or process: the file name, type, and size; the document title; the accessibility scores before and after; the list of accessibility issues found (general findings, not document text); and processing details such as the AI model used, how long it took, how much text was processed, and whether it succeeded
• Your free and purchased credit balance, and a record of credit purchases and grants

If your account belongs to an organization account, that organization’s administrators can see this activity for their organization and produce compliance reports from it.

Credit packs are paid for by card through Stripe Checkout. Stripe processes your card details; we never receive or store them. We keep the checkout reference and the credits added to your account.

Usage counters tied to your account and organization identifiers are kept briefly in Upstash to enforce rate limits. Errors and performance data are reported to Sentry with personal data collection turned off and no session recording. Document Ally Pro uses cookies only to keep you signed in, and it runs no advertising or analytics trackers.

Document Ally Pro is not designed for protected health information. Please do not upload documents that contain it.

More technical detail is on the Document Ally Pro trust page.

6. This Website (esdesigns.org)

We use Google Analytics to understand how visitors use this site: which pages are viewed, which buttons and links are clicked, the referring site, the type of device and browser, and an approximate location (country or city) derived from your IP address. Google Analytics sets cookies in your browser to do this. We use these reports only to improve the site. You can block these cookies in your browser settings, or install Google’s Analytics opt-out add-on.

When you send a message through a form on this site, we receive what you type (usually your name, email address, and message, and your institution where a form asks for it) along with which form you used. Submissions pass through a Cloudflare Turnstile check that screens out automated spam, and are stored in our Supabase database, which notifies us by email. We use them only to reply to you.

If you join the Thrustline launch list, we store your email address and use it to tell you when Thrustline is available and to send occasional build notes from ES Designs. Newsletter subscriptions are managed through Beehiiv, our email provider. Every email includes an unsubscribe link, and you can also ask us to remove you at any time.

This site is hosted on GitHub Pages, which may log visitors’ IP addresses for security purposes. Its fonts are loaded from Google Fonts, which receives your IP address when your browser requests them.

7. Information We Do Not Collect

For full transparency, none of our Meta Quest applications collect any of the following:

• Location or GPS data
• Financial or payment information (purchases on the Meta Horizon Store are handled by Meta, and Vantura billing is handled by our payment processor; neither reaches our servers)
• Advertising identifiers, or any data used for advertising
• Social media data
• Microphone or camera recordings
• Eye, face, or body tracking data, or any other biometric data
• Scans or maps of your room
• Contacts, calendars, or files outside the application

We do not sell personal information, and we do not share it with third parties for their own marketing purposes.

8. Device Permissions

Our apps use certain VR hardware features solely to make the app work, not for data collection. Sensor data is processed on the headset in real time and is never transmitted to us.

• Head tracking: reads the rhythm of your movement on your machine to set your speed and steering. It is processed in real time; only the results described in Section 2 (such as your race path) are saved, and only on your headset.
• Hand tracking: lets you use the menus with your hands instead of controllers. Processed in real time; hand data is never recorded or transmitted.
• Passthrough: shows your real surroundings while you set up and calibrate. The headset’s system draws the passthrough view; Thrustline never receives camera images.

• Head tracking: required to display 360 video, so the view follows where you look. Processed in real time.
• Hand tracking: lets you operate the menus with your hands instead of controllers. Processed in real time; hand data is never recorded or transmitted.
• Network access: used to sign in, download assigned lesson videos, and report class readiness and viewing activity as described in Section 3.

• Hand tracking: enables natural hand interactions with 3D anatomy models and menus. Processed in real time.
• Eye tracking: used for gaze-based interaction with educational content. Processed in real time; gaze data is never recorded or transmitted.
• Passthrough: blends the real-world environment with virtual content. The headset’s system draws the passthrough view, and video never leaves the device.

9. Student Data and Institutional Use

When an institution uses Vantura with enrolled students, the account, enrollment, and viewing records described in Section 3 may constitute education records under the Family Educational Rights and Privacy Act (FERPA) and comparable state laws.

The institution controls those records. We process them only to provide the service to that institution, under its direction. We do not use student data to build advertising profiles, to train machine learning models, or for any purpose other than operating Vantura for the school. An institution may request export or deletion of its data at any time, and we will act on that request.

Document Ally Pro does not store document contents, so processing student work through it does not create a new store of education records. The records it does keep (Section 5) contain the uploader’s account email and document metadata; for an organization account, the institution controls them.

Institutions that require a written data protection agreement or student data privacy addendum should contact us using the details below.

10. Third-Party Services

Thrustline and the Anatomy & Physiology Lab use no third-party services of their own.

Vantura relies on the following providers to operate:

• Supabase: authentication, database, and application logic
• Cloudflare R2: storage and delivery of uploaded video files
• Cloudflare Turnstile: bot protection on portal sign-in
• Vercel: hosting for the instructor web portal

Document Ally Pro relies on:

• Supabase: authentication and database, hosted in the United States
• Anthropic: the AI model that remediates documents
• Vercel: hosting and server logs
• Stripe: card payments for credit packs
• Upstash: rate limiting
• Sentry: error and performance monitoring
• Cloudflare Turnstile: bot protection on sign-in and sign-up

This website relies on:

• Google Analytics: site usage reports
• Supabase: storage of form submissions and email signups
• Vercel and Cloudflare Turnstile: receiving form submissions and screening out spam
• Resend: the email notification we receive when a form is submitted
• FormSubmit: a backup email delivery path for forms, used only if our database cannot be reached
• Beehiiv: newsletter delivery and subscription management
• GitHub Pages and Google Fonts: hosting and fonts

These providers process data on our behalf in order to run our services. They are not permitted to use it for their own purposes, except as described in their own privacy policies (for example, Google’s handling of Analytics data).

Our Quest applications are distributed through the Meta Horizon Store. The Meta platform itself may collect certain data as part of its operating system and store services, such as app install events and platform telemetry. Our apps are also built with Meta’s software development kit, which may send Meta usage and performance information about that kit. That collection is controlled by Meta, not by ES Designs, and we do not receive it. Please refer to Meta’s Privacy Policy for details on their data practices.

11. Children’s Privacy

Our applications and this website are not directed at children under 13, and we do not knowingly collect personal information from children under 13. Use of Meta Quest is subject to Meta’s own age requirements.

Thrustline and the Anatomy & Physiology Lab collect no personal information from any user, so no child-specific data is at risk. For Vantura, accounts are created by or on behalf of an institution for its enrolled learners. If you believe a child under 13 has created a Vantura account or sent us information through this website, contact us and we will delete it.

12. Data Retention

• Thrustline: saved data remains on your headset until you use Settings › Reset, uninstall the app, or clear its data through your Meta Quest settings. We hold none of it.
• Vantura: account, class, enrollment, headset, and viewing records are retained while the account or institutional subscription is active. Uploaded videos are retained until deleted by the institution. On request, we delete an account or an institution’s data; deletion is completed within 30 days. Downloaded video on a headset is removed when the user signs out or the app is uninstalled.
• Anatomy & Physiology Lab: no data is retained. All session data is cleared when the application closes.
• Document Ally Pro: document contents are never stored. Account, document, and credit records are kept while the account is open; when an account or organization account is closed, its data is deleted within 30 days. We export or delete it sooner on request.
• This website: form messages are kept for as long as we need them to reply and keep a record of the conversation, and are deleted on request. Email addresses stay on a list until you unsubscribe or ask us to remove them. Google Analytics keeps event-level data for no more than 14 months.

13. Data Security

Thrustline and the Anatomy & Physiology Lab send nothing to our servers, so there is nothing of yours on our side to intercept or breach. What Thrustline saves is kept in the app’s private storage and protected by the Meta Quest platform’s device-level security.

For Vantura, Document Ally Pro, and this website, all traffic is encrypted in transit using HTTPS, and stored data is encrypted at rest by our hosting providers. In Document Ally Pro, each organization’s records are isolated from every other organization’s at the database level. In Vantura, access to class content is enforced at the database level, so an account can only reach videos for classes it teaches or is enrolled in, and video links are short-lived and individually signed rather than publicly accessible. No system is perfectly secure, but we design for least privilege and keep the amount of personal data we hold small.

14. Your Choices and Rights

You may request access to the personal information we hold about you, request a correction, or request deletion. Contact us using the details below and we will respond within 30 days.

• Thrustline: everything it saves is on your headset and under your control; see “Deleting your data” in Section 2.
• Vantura: if you use Vantura through your school, your school administers your account, and we may direct requests about student records to your institution. You can stop all data collection by Vantura at any time by signing out of the app, which also removes downloaded lessons from the headset.
• Document Ally Pro: ask us to export or delete your account and its records. If your account belongs to an organization account, we may direct requests to its administrators.
• Email: use the unsubscribe link in any email, or write to us.
• Analytics: block Google Analytics cookies in your browser or use Google’s opt-out add-on.

15. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date at the top. Continued use of our applications or this website after changes are posted constitutes acceptance of the updated policy.

16. Contact Us

If you have any questions or concerns about this privacy policy or our data practices, please contact ES Designs:

• Website: esdesigns.org
• Email: privacy@esdesigns.org