Privacy

What we collect

Three things, for three reasons:

• Order data — your name, contact info, ship-to or pickup destination, FFL information (if applicable), payment method, and cart contents. Persisted to our database so we can fulfill the order and let you check status later. Retained while the order is in flight and for tax + audit purposes afterwards.
• ATF Form 4473 records for every firearm transferred. Federal law (ATF rule book) requires us to retain these for as long as we hold our FFL — and for 20 years after we close, if we ever do. These records are not in our online database; they're paper-and-locked-cabinet, accessible only to ATF compliance audits.
• Contact-form messages you send via contact.html. Stored so a real person can read and reply. Retained until the conversation is resolved; older messages get pruned on a rolling basis.

What we don't collect

• We don't track what you browse on this site. No Google Analytics, no Meta Pixel, no Hotjar, no session-replay tools.
• We don't run loyalty programs or "preference profiles." There's no database row for what you might want next.
• We don't share or sell customer information, ever. Not to marketing networks, not to data brokers, not to ammunition distributors, not to anyone. The only exceptions are when federal law explicitly requires us to disclose (ATF audit, lawful court order, etc.).
• Browsing this site doesn't require an account. We don't operate one.

Payment data

Card payments are processed by Stripe. Card numbers never reach our origin — Stripe.js renders the card form inside an iframe served from Stripe's own servers, and we only see a payment-intent identifier ("pi_*") afterwards. Our PCI scope is SAQ A. Cash and Zelle payments happen at the counter or via your bank's interface; we don't store those credentials either way.

Cookies and local storage

We use local storage (not cookies) to remember your cart between visits. That's it — no third-party cookies, no tracking pixels, no advertising trackers. The cart data stays on your device; we don't read it server-side unless you submit an order.

Email forwarding

Email we send (order confirmations, contact-form replies) is delivered via MailChannels through Cloudflare. They handle the SMTP relay; they don't get a copy of the message body for analytics. If you reply to one of our emails, your reply goes to [email protected] directly.

Encrypted communication, if you need it

We keep a Signal number and a Session ID for FFL clients who don't want firearm correspondence in plain email. Ask at your appointment and we'll add you to those channels. Same content; just routed encrypted end-to-end.

Your rights

If you want to know what we have on you, email [email protected] from the email on file with your order ID. We'll share what's in our system within five business days. If you want it deleted, we'll delete everything we legally can — order records federal law requires us to keep are the only floor. ATF 4473s in particular: we are not permitted to destroy them.

Children

This site is not directed at children. We don't knowingly collect information from anyone under 18. If you believe we have information about a minor, contact us and we'll delete it.

Changes

If we update this policy, the effective date at the top of this page changes. Material changes get an email notice to anyone with an active order.

Contact

Privacy questions: [email protected].