Privacy Policy

USA Arms is operated by Gwun LLC, a Florida limited liability company. This Privacy Policy applies to USA Arms, including usaarms.com, our subdomains, APIs, map and tile services, forms, accounts, and related services.

USA Arms is a U.S.-focused directory, map, search, listing, and community-information service. USA Arms does not sell firearms, ammunition, suppressors, accessories, transfers, background checks, shipping, FFL services, or training directly. Users must contact listed businesses directly.

• Name, email address, phone number, and account login information.
• Business name, listing URL, business type, role, title, or relationship to a business.
• Listing claim, authorization, ownership verification, correction, support, or contact request details.
• Photos, logos, descriptions, reviews, ratings, comments, files, documents, or other content you submit when those features are enabled.
• Newsletter, calendar, alert, subscription, or notification preferences when those features are enabled.
• Payment-related information if paid features are enabled. Payments are expected to be processed by a third-party processor such as Stripe; USA Arms does not intend to store full payment card numbers.

USA Arms collects and publishes directory information about firearm-related businesses, organizations, events, instructors, FFLs, ranges, shops, manufacturers, service providers, and related entities.

Some public records or public websites may include home-based FFLs, sole proprietors, individual instructors, or addresses that may also be personal addresses.

• IP address, browser type, device type, operating system, and referring pages.
• Pages viewed, search, map, or listing interactions, and dates and times of access.
• Approximate location inferred from IP address.
• Precise browser location only if you choose to use a location-based map feature such as Locate me.
• Error, security, and server log information.

USA Arms uses first-party Boom telemetry, Cloudflare Analytics, Umami, and server logs. Boom telemetry records page, route, static asset, public API, and Open Graph image request events for the usaarms.com site using privacy-safe route patterns and source buckets rather than raw directory paths, query strings, entity IDs, database IDs, IP addresses, precise location, or raw browser cookie values in dashboard route-detail reads.

Boom telemetry honors Global Privacy Control, legacy Do Not Track, and the q_optout cookie for human-like browser traffic. When Sec-GPC: 1, DNT: 1, or q_optout=1 is present, Boom telemetry suppresses human-like capture and deletes the q cookie. Verified bot and crawler traffic may still be classified and counted for operations, abuse prevention, and crawl analysis.

If you click a Locate me, use my location, or similar map control, your browser may ask for permission to share precise location. USA Arms uses that location to center the map or show nearby results. USA Arms does not currently intend to store precise visitor geolocation with your account or profile.

We do not currently use advertising cookies, retargeting pixels, Meta Pixel, Google Ads tags, or similar cross-site behavioral advertising technologies.

We may use cookies, local storage, server logs, or similar technologies for site operation, security, fraud and abuse prevention, accounts and sessions, preferences, analytics, performance, and diagnostics. Boom telemetry may set a first-party q cookie to avoid double-counting browser requests and a q_optout cookie if you opt out at /i/o. The q cookie is deleted when q_optout, Global Privacy Control, or legacy Do Not Track suppression applies. If advertising cookies, retargeting pixels, or similar technologies are added, this Privacy Policy should be updated and any required choices should be provided.

• Operate, maintain, secure, and improve the Service.
• Build, verify, update, correct, and display directory listings.
• Review listing claims and ownership or authorization requests.
• Respond to contact forms, support requests, corrections, and removal requests.
• Create and manage accounts, calendar subscriptions, alerts, notifications, and paid features when enabled.
• Publish user-submitted reviews, ratings, photos, comments, descriptions, or other content where those features are enabled.
• Detect, prevent, and investigate spam, scraping, abuse, fraud, security incidents, unlawful activity, or violations of our Terms.
• Provide API, export, or data access products based on public directory and listing data.
• Comply with legal obligations and enforce our rights.

• Directory listings and public submissions may be displayed publicly through USA Arms, search, maps, APIs, exports, or related directory products.
• Service providers may process information for hosting, CDN, security, analytics, databases, storage, email, payments, anti-spam, abuse prevention, and operations.
• If you ask us to contact a listed business, submit a claim, request a correction, or use a future lead/contact feature, we may share information as needed to process that request or provide that feature.
• API access, exports, bulk data, or similar products may include public directory/listing information. These products are not intended to include private contact form submissions, private account information, or payment information.
• We may disclose information for legal, safety, security, enforcement, abuse-prevention, or business-transfer reasons.

Current service examples include Cloudflare, Umami, server infrastructure hosted with Hetzner, and email/database systems.

• Server logs are generally retained for up to 1 year.
• Backups are generally retained for up to 1 year.
• Contact form submissions are retained for as long as useful to respond, operate, improve, document, or protect the Service.
• Listing claim and verification submissions are generally retained for as long as the related account or claimed listing exists.
• Uploaded verification materials are generally retained for as long as the related account exists, unless deleted earlier.
• Public listing data is retained for as long as the listing is relevant, public, useful, or needed for directory, archival, correction, quality assurance, legal, or operational purposes.
• Source markdown, HTML, source URLs, and similar quality-assurance records may be retained where useful for quality assurance, provenance, debugging, dispute handling, or accuracy review.

We may retain information longer where needed for security, fraud prevention, legal compliance, backups, dispute resolution, or enforcement.

USA Arms is a continuous work in progress. Listings may be incomplete, outdated, duplicated, miscategorized, or inaccurate. We work to correct inaccurate listing data and remove closed businesses.

Because some listing information comes from public records, public datasets, public websites, or business-published materials, we may not remove every public listing or every public data element on request. We will review requests in good faith, especially where a listing is inaccurate, closed, duplicated, unsafe, misleading, or includes a home-based business or individual information that creates a reasonable privacy or safety concern.

We use reasonable technical, administrative, and organizational measures designed to protect information. For example, we use HTTPS for the Service.

No website, system, database, or transmission method is completely secure. We cannot guarantee absolute security.

• Request correction of inaccurate listing information.
• Request removal of closed or inaccurate listings.
• Request access to certain information you submitted.
• Request deletion of certain information you submitted.
• Update or close your account if account features are enabled.
• Unsubscribe from marketing emails if marketing emails are enabled.
• Disable cookies or storage through your browser settings.

To make a request, use Contact. We may need to verify your identity or authority before fulfilling certain requests.

The Service is intended for adults 18 and older. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

USA Arms is intended for users in the United States. Our systems, vendors, and infrastructure may process information in the United States, Finland, the European Economic Area, or other locations where we or our service providers operate.

Based on current facts, Gwun LLC does not believe it meets the thresholds to be a business subject to the California Consumer Privacy Act as amended by the California Privacy Rights Act. USA Arms provides California-related disclosures for transparency.

Review the California Privacy Notice for category, source, purpose, sale/share, and rights-request details.

We may update this Privacy Policy from time to time. The Last updated date above shows when it was last revised. Your continued use of the Service after an update means you accept the updated Privacy Policy to the extent permitted by law.