Privacy
California Privacy Notice
California-related privacy disclosures and notice at collection for USA Arms.
Last updated: June 17, 2026
Supplemental Notice
This California Privacy Notice supplements the USA Arms Privacy Policy. USA Arms is operated by Gwun LLC, a Florida LLC.
Based on current facts, Gwun LLC does not believe it meets the thresholds to be a business subject to the California Consumer Privacy Act as amended by the California Privacy Rights Act. USA Arms provides this notice for transparency and to document how USA Arms currently handles California-related privacy issues.
Notice At Collection
| Category | Examples | Purposes | Sale/share status | Retention |
|---|---|---|---|---|
| Identifiers | Name, email, phone, IP address, account ID, business address, listing contact info. | Accounts, forms, listing claims, corrections, security, analytics, directory display. | Private visitor/account/contact data is not sold. Public listing data may be displayed and may later be licensed through API/export products. | Logs/backups generally 1 year; account/claim data while account or listing exists; listing data while useful/relevant. |
| Customer records | Contact details, claim details, verification submissions, uploaded proof, payment records if paid features are enabled. | Verify listing claims, provide support, process paid features, maintain records. | Not sold as private user data. | While useful; claim/verification data generally while account exists; backups generally 1 year. |
| Commercial information | Paid listing purchases, subscriptions, sponsored placements, invoices, payment status. | Billing, paid features, accounting, fraud prevention, support. | Not sold as private user data. | As needed for accounting, tax, fraud prevention, legal compliance, and operations. |
| Internet/electronic activity | Logs, first-party Boom telemetry, analytics, pages viewed, privacy-safe route patterns, public API and Open Graph image requests, search/map/listing interactions, referrer, browser/device info, the first-party q browser de-duplication cookie, and the q_optout opt-out cookie. | Operate, debug, secure, improve, analyze usage, prevent abuse/scraping. | Not currently sold/shared for targeted advertising. | Logs generally 1 year; first-party telemetry and analytics per provider/system settings. |
| Approximate geolocation | Approximate IP-based location; business/listing coordinates; precise browser location if you choose to use Locate me or a similar map control. | Analytics, security, maps, directory display, centering the map, nearby results. | Precise visitor geolocation is requested only after user action and is not currently sold or shared for targeted advertising. Business coordinates may be public listing data. | Logs generally 1 year; listing data while useful/relevant. |
| Professional/employment info | Role/title, business affiliation, owner/instructor/representative info, FFL/license-related business info. | Listing claims, verification, directory display, corrections. | Public listing data may be displayed and may later be licensed through API/export products. | While account/listing exists or while listing remains useful/relevant. |
| User content | Reviews, ratings, photos, logos, descriptions, comments, event submissions, notes. | Publish public content, moderate, operate and improve Service. | Public content may be displayed and distributed through Service features. | While account/content/listing exists or while useful/relevant. |
| Sensitive personal information | Account credentials; verification documents if submitted; government/license-related documents if submitted or public; precise browser location if you choose to use a map location feature. | Account security, verification, abuse prevention, legal compliance, user-requested map location features. | Not sold as private user data. | Verification data generally while account exists; backups generally 1 year. |
Sources
- You, your account, and forms you submit.
- Public records, public datasets, FFL and license-related public sources.
- Public websites, business pages, crawlers, and manual research.
- Listed businesses or their representatives.
- First-party telemetry, analytics, logs, technical systems, service providers, and payment processors if paid features are enabled.
Purposes
USA Arms uses these categories of information to operate the directory, review claims, display listings, provide accounts, publish public user content, operate analytics and security, offer paid features, and provide API/export products based on public listing data.
Sale And Sharing Status
USA Arms does not currently sell or share private visitor, account, contact form, verification, or payment information for money or targeted advertising.
USA Arms may later license, sell, or provide API/export access to public directory/listing data. Before doing so at scale, USA Arms should review whether the data includes personal information and whether California privacy, data broker, or opt-out obligations apply.
Rights Requests
If and to the extent California privacy law applies, California residents may have rights to request access, deletion, correction, opt-out of sale/share, limitation of certain sensitive personal information uses, and non-discrimination.
Submit requests through Contact. We may verify identity or authority before responding.
Privacy Choices Link
A Your Privacy Choices or Do Not Sell or Share My Personal Information footer link is not currently expected to be required based on the current facts and lack of targeted advertising or sale/share of private visitor data.
For first-party Boom telemetry, USA Arms currently honors Global Privacy Control, legacy Do Not Track, and q_optout=1 by suppressing human-like capture and deleting the q cookie. This telemetry choice is separate from any future California sale/share opt-out workflow that may become required if USA Arms' practices or legal obligations change.
Add the link before launching any practice that requires it.