Legal Center
Every policy for the Gun Vault family of platforms in one place. Choose a tab to read it. Questions? Email legal@gunvault.co.
Privacy Policy
The 90-second version
Gun Vault is run by Gun Transfer America Inc., a Utah corporation. We built Gun Vault because firearm owners deserved a private place to keep their records. That guides everything below.
What we collect: only what's needed to run the service — your account info, the firearm records you add, and basic site analytics. We do not buy data about you from third parties.
What we do with it: run your vault, send you service emails, detect fraud, keep backups, comply with the law. That's it.
What we don't do: sell it, rent it, share it with ATF, share it with gun-control groups, use it to train AI, or send it to advertisers. Your firearm records are not a product.
Your rights: export everything, delete your account, see what we have on file, and opt out of data sales (there are none to opt out of). These are self-service in your account settings, no support ticket required.
This summary is for quick reference. The full policy below is the binding version. If they disagree on a detail, the full policy wins.
Draft for review. This policy was written in plain English to reflect our data practices as of the effective date. It is intended to be a starting point and may be updated based on legal review, changes to our product, or changes in privacy law. We will update the "Effective" date whenever the policy changes materially.
Who We Are
This Privacy Policy applies to Gun Vault and the related Gun Transfer America platforms (GunPrice, GunClear, GunShare, GunTransfer, collectively "Services"), operated by Gun Transfer America Inc., a Utah corporation headquartered in Ogden, Utah, United States ("we," "us," "our," or "the Company").
This policy describes what information we collect, how we use it, when we share it, and what rights you have. It applies to visitors, registered users, paid subscribers, and anyone who interacts with our Services.
Information We Collect
Information you provide
- Account information: email address, password (stored as a bcrypt hash, never in plaintext), first name, last name, phone number (optional), state of residence.
- Firearm records: manufacturer, model, serial number, caliber, acquisition details, photos, written history, bills of sale, and any other information you choose to attach to a record.
- Legacy planning data (Gun Legacy/Gun Trust plans): designated heirs, their contact information, written stories, executor contact details.
- NFA & gun trust data (Gun Trust plan): NFA item registrations, ATF tax stamp PDFs, gun trust documents, Responsible Person information.
- Payment information: billing name, billing address, and a payment token from our payment processor. We do not see or store your full credit card number — card data is tokenized by Authorize.net and only the token is returned to us.
- Communications: messages you send us through the contact form, email, or support channels.
Information collected automatically
- Log data: IP address, browser type and version, operating system, referring page, pages viewed, and approximate timestamps. Used for security, debugging, and aggregate analytics.
- Session data: a JWT session token stored in your browser to keep you signed in. This token does not contain personal data beyond your user ID and session expiry.
- First-party analytics: we run our own analytics server to understand which pages are useful and where users get stuck. We do not use Google Analytics, Facebook Pixel, or similar third-party tracking pixels.
What we do not collect
- We do not buy data about you from data brokers.
- We do not collect biometric information (fingerprints, face recognition, voiceprints).
- We do not collect precise geolocation (GPS coordinates) unless you explicitly provide an address.
- We do not track you across the internet using cookies or fingerprinting.
How We Use Information
We use the information we collect for the following purposes:
- To run the Service: create and maintain your account, display your firearm records to you, process subscriptions, handle transfers and clear-checks, generate reports and exports.
- To communicate with you: send transactional emails (verification codes, receipts, renewal reminders, security alerts), reply to support requests, send occasional service announcements.
- To protect the Service: detect and prevent fraud, abuse, and unauthorized access. Log analysis, rate limiting, and anomaly detection.
- To improve the Service: aggregate analytics about how features are used, which pages people need help with, and what improvements would matter most.
- To comply with the law: respond to valid legal process, meet tax reporting obligations, fulfill regulatory requirements.
We do not use your information to:
- Train artificial intelligence or machine learning models.
- Profile you for advertising or sell insights about you.
- Build behavioral scores to share with insurers, employers, or background-check services.
- Report your firearm ownership to any government agency, including ATF.
What We Don't Do With Your Data
Because privacy is the product, some things are worth stating explicitly:
- We do not sell your personal information. Not to data brokers, not to advertisers, not to insurance carriers, not to anyone. Under California's CPRA and similar state laws, our "Do Not Sell or Share" setting is effectively always on.
- We do not share your data with gun-control organizations. Not Everytown, not Giffords, not any comparable group. Likewise we do not share with the NRA or any other pro-Second-Amendment organization. Gun Vault is a tool, not a cause.
- We do not share with firearm manufacturers or dealers. Your serial numbers are not used for warranty lookups, recalls, or marketing.
- We do not share with insurance companies. Your vault is not used to set premiums, trigger audits, or verify claims. If you want to share with your insurer, you export and send it yourself.
- We do not report to the ATF or any federal registry. Gun Vault is not an FFL, is not connected to ATF systems, and does not submit data to any government registry.
- We do not use your data for AI training. Your records, photos, stories, and documents are not training data.
Legal Process & Government Requests
We are a US company subject to US law. We comply with valid legal process, but we defend our users within that process.
What we require
- Valid, court-issued legal process directed at a specifically named account or records.
- Specificity: the user's name, the records sought, the legal basis for the request.
- Appropriate jurisdiction: the requesting court must have authority over us.
What we do not do
- Respond to informal requests, agency letters, or fishing expeditions.
- Provide bulk data or "registry dumps" to any government body.
- Provide data in response to non-US legal process without a US court order.
Notification
When we receive legal process about your account, we will notify you unless we are explicitly barred from doing so by a court-issued gag order. Where we are gagged, we work to lift the gag as soon as legally possible so we can notify you after the fact.
Transparency report
We publish aggregate statistics on legal requests received and records disclosed on our Security page. The current values are zero on both counts.
Your Rights & Choices
Regardless of where you live, you have the following rights in your Gun Vault account:
Access
You can see everything we have stored about you. Your account settings include a "What We Know About You" page that lists every stored field, including login IP addresses and timestamps.
Export
You can export your data at any time, on any plan including Free. CSV, PDF, or ZIP (with photos and documents). No customer-service ticket required.
Correction
You can edit any firearm record, heir designation, or account detail directly in your vault. If you find something we store about you that you can't edit yourself, contact us.
Deletion
You can delete your account from account settings. Your data is wiped from our active systems immediately and from backups within 30 days. Financial records required by US tax law (invoices, payment receipts) are retained for the period required by law, typically 7 years.
Opt-out of sale or sharing
We do not sell or share your personal information for targeted advertising. This setting is effectively always on. If you're in California, Virginia, Colorado, Connecticut, or another state with comprehensive privacy laws, you do not need to submit a "Do Not Sell" request because we never sell or share.
Non-discrimination
We will not deny you service, charge you a different price, or reduce the quality of service because you exercised any privacy right.
How to exercise your rights
Most rights are self-service in your account settings. For anything you can't resolve yourself, email legal@gunvault.co with "Privacy Request" in the subject line. We respond within 30 days. We may need to verify your identity before acting on a request.
Cookies & Tracking
We use cookies and similar technologies sparingly, and only for purposes you would expect.
Essential cookies
These are required for the Service to work. They handle your session (keeping you signed in), CSRF protection (preventing cross-site request forgery), and load balancing. You cannot opt out of essential cookies; disabling them will break the Service.
Analytics cookies
We use first-party analytics cookies to understand aggregate site usage — which pages are popular, where users drop off, how fast pages load. These cookies do not identify you individually, are not shared with third parties, and are not used for advertising.
Advertising cookies
We do not use advertising cookies. We do not run ads on our Services. We do not participate in advertising networks.
Do Not Track
We honor the Do Not Track browser signal. If your browser sends DNT, we disable analytics cookies for your session.
Data Retention
We keep your information only as long as we need it:
- Account data: retained while your account is active. Deleted within 30 days after you close your account.
- Firearm records and uploaded documents: retained while your account is active. Deleted with your account.
- Backups: our database backups are retained for 30 days on a rolling basis. Your deleted data is fully removed when all backups containing it expire.
- Payment records: retained for 7 years as required by US tax law.
- Log data: retained for 90 days, then deleted or anonymized.
- Support communications: retained for 2 years, then deleted.
- Contact form submissions: retained for 1 year, then deleted.
Security
We take reasonable technical and organizational measures to protect your information:
- Encryption at rest: AES-256 for all stored data.
- Encryption in transit: TLS 1.3 for all connections, HSTS enforced at the edge.
- Password hashing: bcrypt, industry standard, one-way and salted.
- Session tokens: short-lived JWTs signed with a per-installation secret.
- Document storage: tax stamps, trust documents, and bills of sale live in an encrypted object store separate from the database, with signed short-lived URLs for access.
- Access controls: engineering access to decryption keys requires multi-factor approval and is logged.
- US-based infrastructure: all servers, backups, and document storage are in US data centers.
No system is perfectly secure. If Gun Vault ever experiences a data breach that affects your information, we will notify affected users within 72 hours of confirmation — not the legal minimum, but the time it takes us to know what happened and tell you.
You can see our full security practices on the Security page.
Children & Minors
Gun Vault is not directed to children under 18 and we do not knowingly collect personal information from anyone under 18. To use the Service you must be at least 18 years old, and for purchases, the legal age of majority in your jurisdiction.
If you believe a minor has created a Gun Vault account, please email legal@gunvault.co and we will promptly close the account and delete any collected information.
International Users
Gun Vault is intended for use in the United States. Our infrastructure is hosted in the United States, and by using the Service you consent to your information being transferred to and processed in the United States, which may have different data protection laws than your country of residence.
If you are in the European Union, United Kingdom, or another region with comprehensive data-protection laws, our data practices may exceed or fall short of the requirements of your local law. If you have concerns, contact us before using the Service.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, new features, or changes in the law. When we make material changes, we will:
- Update the "Effective" and "Last Updated" dates at the top of this page.
- Email all registered users at least 30 days before the change takes effect, unless the change is legally required to take effect sooner.
- Maintain a changelog of material changes at the bottom of this page.
Continued use of the Service after a policy change takes effect means you accept the updated policy. If you do not accept a change, you can export your data and close your account before the new policy takes effect.
Contact Us
Questions about this policy, privacy requests, or concerns about your data:
- Email: legal@gunvault.co
- Contact form: gunvault.co/contact/ (choose "Legal / Privacy" as the topic)
- Mail: Gun Transfer America Inc., Ogden, Utah, United States
For time-sensitive privacy requests, email is fastest. We respond within 30 days.
Terms of Service
The short version
Gun Vault is record-keeping software run by Gun Transfer America Inc., a Utah corporation. It helps you organize your firearm records. It is not an FFL, not a lawyer, and not a substitute for either.
You're responsible for your own compliance. Firearms laws vary by state, by item, and by situation. We give you tools to organize your records; you (and your attorney when relevant) handle what to do with them.
Subscriptions auto-renew. Cancel anytime from your account. Yearly plans get 7-day refunds; monthly plans are non-refundable but stop charging immediately on cancellation.
Your records are yours. Export anytime. Delete anytime. We won't hold your data hostage.
If we have a dispute, we try to resolve it directly first. If we can't, it goes to binding arbitration in Utah. You keep the right to file small-claims disputes in your local court.
This summary is for quick reference. The full Terms below are the binding version. If they disagree on a detail, the full Terms win.
Draft for review. These Terms were written in plain English to reflect our service as of the effective date. They are intended to be a starting point and should be reviewed by an attorney before launch. We will update the "Effective" date whenever the Terms change materially.
- Acceptance & Agreement
- Who Can Use the Service
- The Service
- Your Account
- Subscriptions & Payment
- Auto-Renewal & Cancellation
- Refunds
- Your Content & Data
- Acceptable Use
- Intellectual Property
- Not a Law Firm · Not an FFL
- Firearms Law Compliance
- Disclaimers & Warranty
- Limitation of Liability
- Indemnification
- Termination
- Disputes & Arbitration
- Changes to These Terms
- General Provisions
- Contact
Acceptance & Agreement
These Terms of Service ("Terms") are a binding agreement between you and Gun Transfer America Inc., a Utah corporation ("we," "us," "our," "the Company"). They govern your access to and use of Gun Vault and the related Gun Transfer America platforms — GunPrice, GunClear, GunShare, and GunTransfer (collectively, the "Service").
By creating an account, accessing the Service, or clicking "I agree" when prompted, you agree to these Terms. If you don't agree, don't use the Service. If you're using the Service on behalf of a business or trust, you represent that you have authority to bind that entity to these Terms.
These Terms work together with our Privacy Policy, which is part of this agreement by reference.
Who Can Use the Service
To use the Service, you must:
- Be at least 18 years old and the legal age of majority where you live.
- Be able to legally possess firearms under federal, state, and local law.
- Provide accurate account information and keep it current.
- Use the Service only for lawful purposes.
We may refuse service, close accounts, or deny access at our discretion, including (but not limited to) suspected violations of these Terms, applicable law, or reasonable requests from users of other accounts.
The Service
Gun Vault is a private digital record-keeping tool for firearm owners. Depending on your subscription tier, the Service includes:
- Storing firearm records (make, model, serial number, caliber, acquisition details).
- Attaching photos, bills of sale, maintenance logs, and written histories.
- Designating heirs, executors, and Responsible Persons (paid tiers).
- Storing ATF tax stamps and gun trust documents (Gun Trust tier).
- Exporting records in CSV, PDF, or ZIP format at any time.
- Using platform credits on GunTransfer and GunClear transactions (paid tiers).
We may add, modify, or remove features over time. Material changes that reduce features on an existing plan are announced at least 30 days in advance.
Your Account
Account security
You're responsible for keeping your password confidential and for everything that happens under your account. If you suspect unauthorized access, notify us immediately at support@gunvault.co and change your password.
One account per person
Each natural person may hold one primary account. Multiple accounts for legitimate separation (e.g., personal vault and business trust vault) are allowed — contact us if you need this confirmed.
Accurate information
You agree to keep your email, billing, and other account information accurate. We use your email to send transactional messages (verification codes, renewals, security alerts) — an out-of-date address means you may miss important notices.
No sharing of login credentials
Don't share your password with anyone. Executor access (Gun Legacy/Gun Trust) and Responsible Person access (Gun Trust) have their own controlled flows — use those instead of sharing your password.
Subscriptions & Payment
Plans
We offer a free tier (Gun Vault Free) and paid tiers (Gun Safe, Gun Legacy, Gun Trust). Current pricing is listed on the Plans page. Prices are in US dollars.
Payment processing
Payments are processed by Authorize.net. We do not see or store your full credit card number — card data is tokenized at the processor. By subscribing, you authorize us to charge the payment method you provide for the subscription fee and any applicable taxes.
Price changes
We may adjust pricing for new sign-ups at any time. For existing subscribers, we will notify you by email at least 30 days in advance of any price change, and you may cancel before the new price takes effect.
Taxes
Prices shown do not include sales tax unless stated. Where we are required by law to collect sales tax or similar transaction taxes, they will be added at checkout.
Auto-Renewal & Cancellation
How to cancel
Cancel anytime from your account settings, or by emailing support@gunvault.co. No phone call required. Cancellation stops future billing; you keep access until the end of the period you've already paid for.
Renewal reminders
We send email reminders before annual renewals so you can cancel if you want to. Monthly renewals don't trigger reminders — cancel anytime from account settings.
Failed renewals
If your payment method fails at renewal, we retry up to 3 times over 7 days and email you each attempt. After the third failure, your account drops to Free tier. Your records remain intact but features above Free become read-only. Update your payment method anytime to reactivate.
Plan changes
Upgrades take effect immediately and are prorated — you pay the difference for the rest of your current billing period. Downgrades take effect at your next renewal; your records stay intact but features above your new tier become read-only.
Refunds
Annual plans
First-time annual subscribers can request a full refund within 7 days of the initial purchase. After 7 days, prorated refunds are handled case-by-case — contact support and we'll work something out that's fair.
Monthly plans
Monthly subscription fees are non-refundable. Cancel anytime to stop future billing; you keep access for the rest of the paid month.
Exception: material service failures
If we materially fail to deliver the Service (extended outages, missing features you subscribed for), we will refund or credit at our discretion even outside the standard refund window. Email support@gunvault.co to request.
Chargebacks
If you dispute a charge with your card issuer without contacting us first, we may suspend your account pending resolution. Please email us before initiating a chargeback — we'd rather fix the problem than fight the fee.
Your Content & Data
You own your content
You retain full ownership of the data you upload to Gun Vault — firearm records, photos, stories, bills of sale, tax stamps, trust documents, everything. We don't claim any ownership over it.
Limited license to us
You grant us a limited, non-exclusive, royalty-free license to store, process, display, and transmit your content solely to operate the Service for you (show your records to you, process exports you request, deliver content to your designated executors/heirs/RPs, generate backups). This license ends when you delete the content or close your account.
Portability
You can export your content in CSV, PDF, or ZIP format at any time, on any plan. We don't charge for exports. We don't limit the frequency of exports.
Deletion
You can delete firearm records and close your account at any time. Deleted content is wiped from active systems immediately and from backups within 30 days. Exception: financial records required by US tax law are retained for the period required by law.
If we shut down
If Gun Transfer America Inc. ceases operating Gun Vault, we will give at least 90 days' notice by email with clear export instructions.
Acceptable Use
Don't use the Service to:
- Violate any federal, state, or local law, including firearms laws.
- Store records for firearms you don't legally possess.
- Impersonate another person or provide false identity information.
- Interfere with the Service's operation (automated scraping, rate-limit evasion, denial-of-service, reverse engineering beyond what's legally permitted).
- Attempt to access accounts, data, or systems you're not authorized to access.
- Upload malware, viruses, or content that could harm the Service or other users.
- Infringe the intellectual property rights of others.
- Use the Service to harass, threaten, or harm others.
Violations may result in account suspension or termination without refund.
Intellectual Property
Our IP
The Service — including software, design, text, graphics, logos, and the "Gun Vault," "GunPrice," "GunClear," "GunShare," and "GunTransfer" names and branding — is owned by Gun Transfer America Inc. and protected by US and international intellectual property laws. You may not copy, modify, distribute, or create derivative works except as expressly permitted by these Terms or by separate written agreement.
Your IP
Your content remains yours. See Section 8 for details.
DMCA
If you believe content on the Service infringes your copyright, submit a DMCA notice per our DMCA Policy.
Not a Law Firm · Not an FFL
Information in the Service — including state transfer guidance, NFA-related content, estate planning content, and FAQs — is provided for general informational purposes only. It is not legal advice and does not create an attorney-client relationship. Laws governing firearms are complex, vary by jurisdiction, and change over time.
For legal questions about your specific situation, consult a qualified attorney — particularly for NFA items, gun trusts, estate matters, and cross-state transfers.
Separate services in the Gun Transfer America ecosystem (GunTransfer, GunClear) may be provided by third-party FFLs and service providers. Those transactions are subject to their own terms.
Firearms Law Compliance
You are solely responsible for complying with all applicable firearms laws:
- Ownership: you must legally own or possess any firearm you add to your vault.
- Transfers: any transfer of a firearm to another person — including heirs, beneficiaries, or buyers — must comply with federal law (Gun Control Act, NFA where applicable), the law of your state, the law of the recipient's state, and any local law. Most transfers across state lines require an FFL.
- NFA items: possession, transfer, and transport of Title II / NFA items is subject to strict federal and state regulation. A gun trust does not exempt you from these rules.
- Prohibited persons: federal law prohibits certain persons from possessing firearms (18 USC 922(g)). You represent that you are not a prohibited person and that no intended recipient of your firearms is a prohibited person.
We do not verify your compliance with these laws. We do not warrant that information in the Service is accurate or current. Firearms laws change; verify independently before acting.
Disclaimers & Warranty
The Service is provided "as is" and "as available," without warranties of any kind, express or implied, to the maximum extent permitted by law. This includes but is not limited to implied warranties of merchantability, fitness for a particular purpose, title, and non-infringement.
We do not warrant that:
- The Service will be uninterrupted, error-free, or completely secure.
- Information in the Service is accurate, current, or complete.
- Defects will be corrected.
- The Service will meet your specific needs.
We make reasonable efforts to keep the Service running and secure, as described in our Security page, but no online service is perfectly reliable.
Limitation of Liability
To the maximum extent permitted by law, Gun Transfer America Inc. and its officers, directors, employees, and agents are not liable for any indirect, incidental, special, consequential, or punitive damages, including lost profits, lost data, loss of goodwill, or business interruption, arising out of or related to your use of the Service.
Our total aggregate liability to you for any claim related to the Service, whether in contract, tort, or otherwise, will not exceed the greater of (a) the amount you paid us in the 12 months before the claim arose, or (b) $100.
Some jurisdictions do not allow certain limitations of liability, so some of these limitations may not apply to you. Where limitations are not permitted, our liability is limited to the maximum extent permitted by law.
Indemnification
You agree to indemnify and hold harmless Gun Transfer America Inc. from claims, losses, liabilities, damages, costs, and expenses (including reasonable attorneys' fees) arising out of or related to:
- Your violation of these Terms.
- Your violation of applicable law, including firearms laws.
- Your content uploaded to the Service.
- Your interactions with other users, heirs, executors, or Responsible Persons.
Termination
You may terminate your account at any time from account settings, as described in Section 6.
We may suspend or terminate your account if:
- You violate these Terms or applicable law.
- Your payment method has failed repeatedly and you have not updated it.
- We are required to do so by legal process.
- We cease offering the Service (with at least 90 days' notice as described in Section 8).
On termination, sections that by their nature should survive — including IP ownership, disclaimers, limitations of liability, indemnification, and dispute resolution — will survive.
Disputes & Arbitration
Try to resolve it first
If you have a dispute with us, please email legal@gunvault.co before taking legal action. We try to resolve disputes directly. Most issues can be solved by a real human reading a real email.
Governing law
These Terms are governed by the laws of the State of Utah, without regard to its conflict-of-law rules. To the extent federal law applies, it applies.
Binding arbitration
Any dispute that can't be resolved through direct communication will be resolved by binding individual arbitration administered by a recognized arbitration body (such as the American Arbitration Association) under its then-current consumer rules. Arbitration will be held in Weber County, Utah, or by videoconference at your election. Judgment on the arbitrator's award may be entered in any court of competent jurisdiction.
Class action waiver
You and we agree that disputes will be resolved only on an individual basis and not as a class action, representative action, or consolidated proceeding. Neither party may serve as a class representative.
Exception: small claims
Either party may bring a qualifying dispute in small-claims court in its local jurisdiction instead of arbitration, provided the dispute stays in that court.
Opt-out of arbitration
You can opt out of the arbitration and class-action-waiver provisions by emailing legal@gunvault.co with "Arbitration Opt-Out" in the subject, within 30 days of first agreeing to these Terms. Include your name and the email address associated with your account. Opting out doesn't affect the rest of these Terms.
Changes to These Terms
We may update these Terms from time to time. When we make material changes, we will:
- Update the "Effective" and "Last Updated" dates at the top of this page.
- Email registered users at least 30 days before the change takes effect, unless the change is required by law to take effect sooner.
- For significant changes to billing, liability, or dispute resolution, require affirmative acknowledgment before continued use.
Continued use of the Service after a change takes effect means you accept the updated Terms. If you don't accept a change, you can cancel before the new Terms take effect.
General Provisions
Entire agreement
These Terms, together with our Privacy Policy, constitute the entire agreement between you and us about the Service. They supersede any prior agreement on the same subject.
Severability
If any provision of these Terms is found unenforceable, the rest remains in effect. The unenforceable provision is modified to the minimum extent necessary to make it enforceable.
No waiver
Our failure to enforce any provision doesn't waive our right to enforce it later.
Assignment
You may not assign or transfer these Terms without our written consent. We may assign these Terms in connection with a merger, acquisition, or sale of assets, as described in our Privacy Policy.
Force majeure
Neither party is liable for failure to perform caused by circumstances beyond reasonable control — natural disasters, government action, internet infrastructure failures, etc.
No agency relationship
These Terms don't create a partnership, joint venture, employment, or agency relationship between you and us.
Contact
Questions about these Terms, billing disputes, legal matters:
- Email: legal@gunvault.co
- Support: support@gunvault.co
- Contact form: gunvault.co/contact/
- Mail: Gun Transfer America Inc., Ogden, Utah, United States
Acceptable Use
This policy is being finalized. Until it's published, the Terms and Privacy Policy govern. Questions: legal@gunvault.co.
Cookie Policy
The short version
We use the minimum number of cookies needed to keep you signed in, protect you from cross-site request forgery, and understand — anonymously and in aggregate — which parts of the site work well. We do not use advertising cookies, third-party trackers, or identity graphs. We honor Do Not Track.
What is a cookie?
A cookie is a small text file a website stores on your device to remember things between page loads — that you're signed in, what page you were on, etc. Cookies can also be used for tracking and advertising, which is the part we don't do.
This policy also covers similar technologies we may use: localStorage and sessionStorage (for session data in your browser), and server-side session records tied to a cookie.
What cookies we use
A complete list of the cookies and similar technologies we set, as of the last updated date:
| Name | Type | Duration | Purpose |
|---|---|---|---|
gv_session |
Essential | Session (until sign-out) | Keeps you signed in. Contains your JWT session token. Without this, you would have to sign in on every page. |
gv_csrf |
Essential | 24 hours | Cross-site request forgery protection. Prevents malicious sites from making requests on your behalf. |
gv_consent |
Essential | 12 months | Remembers whether you've seen and dismissed the cookie banner (so it doesn't show on every page). |
gv_analytics_id |
Analytics | 12 months | Anonymous ID used by our first-party analytics server to understand which pages are popular. Not tied to your account or identity. |
gv_ref |
Analytics | 30 days | Stores a referral code if you arrived via someone's referral link, so we can credit the referrer when you upgrade. |
How to manage or disable cookies
You can control or delete cookies at any time through your browser settings:
- Chrome: Settings → Privacy and security → Cookies and other site data
- Safari: Preferences → Privacy → Manage Website Data
- Firefox: Settings → Privacy & Security → Cookies and Site Data
- Edge: Settings → Cookies and site permissions → Cookies and site data
Be aware that blocking essential cookies will break sign-in and other core functionality. Analytics cookies can safely be blocked without affecting your ability to use the Service.
Do Not Track
We honor the Do Not Track (DNT) signal. If your browser sends a DNT header, we disable analytics cookies for your session. You will still receive essential cookies required for sign-in and CSRF protection.
Third parties
Our payment processor, Authorize.net, may set their own cookies on the checkout page when you enter a credit card. Those cookies are set by Authorize.net directly, governed by their privacy policy, and are required to process your payment securely. We do not receive their cookie data.
We do not otherwise share your cookie data with third parties.
Changes to this policy
If we add or change how we use cookies, we will update this page and the "Last Updated" date at the top. If the change is material, we will notify registered users by email at least 30 days before it takes effect.
Contact
Questions about cookies or this policy? Email legal@gunvault.co.
DMCA Policy
Overview
Gun Transfer America Inc. ("we," "us," "the Company") respects the intellectual property rights of others and expects our users to do the same. In accordance with the Digital Millennium Copyright Act of 1998 ("DMCA"), 17 U.S.C. § 512, we respond to clear notices of alleged copyright infringement.
This policy describes how to submit a takedown notice if you believe content on Gun Vault or any of our Services (GunPrice, GunClear, GunShare, GunTransfer) infringes your copyright, and how to submit a counter-notice if your content was removed in error.
How to Submit a DMCA Takedown Notice
If you believe your copyrighted work has been copied and posted on our Services in a way that constitutes copyright infringement, please send a written notice to our Designated Copyright Agent (contact details below) containing all of the following:
- A physical or electronic signature of the person authorized to act on behalf of the owner of the copyright.
- Identification of the copyrighted work claimed to have been infringed.
- Identification of the material that is claimed to be infringing and information reasonably sufficient to locate it (URL, page, post ID, etc.).
- Your contact information: name, mailing address, telephone number, and email address.
- A statement that you have a good-faith belief that use of the material in the manner complained of is not authorized by the copyright owner, its agent, or the law.
- A statement, made under penalty of perjury, that the information in your notice is accurate, and that you are the copyright owner or authorized to act on the copyright owner's behalf.
Designated Copyright Agent
Attn: DMCA Agent
Ogden, Utah, United States
Email legal@gunvault.co · Subject: "DMCA Notice"
We prefer to receive notices by email for faster processing. Physical mail is accepted but will take longer to process.
Counter-Notice Procedure
If you believe your content was removed or disabled as a result of a mistake or misidentification, you may submit a counter-notice. Your counter-notice must contain all of the following:
- Your physical or electronic signature.
- Identification of the material that was removed and the location at which it appeared before removal.
- A statement, under penalty of perjury, that you have a good-faith belief the material was removed as a result of mistake or misidentification.
- Your name, address, and telephone number, and a statement that you consent to the jurisdiction of the federal district court for the judicial district in which the address is located (or, if outside the US, any judicial district in which we may be found), and that you will accept service of process from the person who provided the original takedown notice or their agent.
Upon receipt of a valid counter-notice, we will forward it to the original complainant and may restore the content after 10–14 business days unless the complainant files a court action seeking a restraining order.
Repeat Infringers
We reserve the right to terminate the accounts of users who are determined to be repeat infringers of copyright, in appropriate circumstances and at our sole discretion, consistent with 17 U.S.C. § 512(i).
Questions
For questions about this policy or to submit a notice or counter-notice, email legal@gunvault.co with "DMCA" in the subject line.
Compliance
This policy is being finalized. Until it's published, the Terms and Privacy Policy govern. Questions: legal@gunvault.co.
Law Enforcement
This policy is being finalized. Until it's published, the Terms and Privacy Policy govern. Questions: legal@gunvault.co.
Do Not Sell or Share
My Personal Information
We already don't sell or share your data.
There is no opt-out required because there is nothing to opt out of. We do not sell personal information to anyone, and we do not share it for cross-context behavioral advertising. Not now, not ever.
Why this page exists
California law (the California Consumer Privacy Act / California Privacy Rights Act, "CCPA/CPRA") requires certain businesses to provide a clearly labeled "Do Not Sell or Share My Personal Information" link on their homepage. Several other states have enacted similar laws (Virginia, Colorado, Connecticut, Utah, Montana, and more).
Even though we don't sell or share personal information, we provide this page so that California residents and others with similar rights can easily verify that fact and understand their options.
Our commitment
Gun Transfer America Inc. commits that we:
- Do not sell any personal information to any third party for monetary or other valuable consideration.
- Do not share personal information for cross-context behavioral advertising (i.e., targeted advertising based on personal information we collect about you across sites we don't operate).
- Do not use personal information to train AI or machine learning models.
- Do not disclose firearm-related data, serial numbers, or vault contents to manufacturers, insurers, data brokers, gun-control organizations, or any government registry.
- Do not build profiles of you to sell insights, scores, or aggregated data to third parties.
These commitments are also reflected in our Privacy Policy and Security page.
What we do share — and with whom
For full transparency, we do share specific personal information in limited circumstances, all under contractual protections that prevent downstream sale:
- Payment processor (Authorize.net): receives billing name, address, and payment token to process your subscription. Does not receive your firearm data.
- Hosting provider (Bluehost): hosts our databases and servers. Data is encrypted at rest; hosting provider cannot read it.
- Email delivery: sends transactional emails from our domain. Sees only the envelope (recipient, subject, timestamp).
- Legal process: we disclose data only in response to valid, court-issued legal process directed at a specific account, and only to the extent required. See our Security page for the full approach.
None of these count as "selling" or "sharing for behavioral advertising" under CCPA/CPRA definitions.
Your right to submit a request anyway
You have the right to submit a formal "Do Not Sell or Share" request even though no action is required. If you'd like written confirmation that we have no sales to stop, or if you want to verify your specific account, you can submit a request in any of these ways:
- Email: legal@gunvault.co with subject line "Do Not Sell Request"
- Contact form: gunvault.co/contact/ — choose "Legal / Privacy" as the topic
We will respond within 15 business days to confirm our no-sale status and provide any additional details about your account you request.
Authorized agents
You may designate an authorized agent to make a request on your behalf. The agent must provide proof of their authority (such as a signed permission letter) and proof of your identity. We may deny requests from agents who cannot provide adequate verification.
Non-discrimination
We will not discriminate against you for exercising any privacy right. Specifically, we will not deny you service, charge different prices, reduce the quality of service, or suggest anything of the sort because you submitted a request.
Global Privacy Control
Gun Vault recognizes the Global Privacy Control (GPC) browser signal as a valid opt-out preference. Because we do not sell or share personal information in the first place, enabling GPC has no additional effect on our handling of your data — you are already opted out.
Other privacy rights
Depending on where you live, you may have additional rights including the right to know what we collect, the right to delete, the right to correct inaccurate data, and the right to limit use of sensitive personal information. See the Privacy Policy Section 7 for the full list and how to exercise each.
Questions
For questions about this policy or to exercise any privacy right, email legal@gunvault.co with "Privacy Request" in the subject line.
Your serial numbers
are nobody's business but yours.
Gun Vault is built on a simple premise: firearm records belong to the owner, not the platform. No ATF reporting. No data sales. No silent sharing with manufacturers, insurance companies, or anyone else. Ever.
TLS 1.3 in transit
Not connected to ATF
No lock-in, ever
Built by US owners
Who we do not share with
How your data is actually protected
Specifics, not buzzwords. Here's the stack keeping your vault private, and the trade-offs each piece makes.
AES-256 At Rest
Every record in our database is encrypted at rest using AES-256-GCM. Firearm details, photos, stories, tax stamps, and trust documents alike. Keys are rotated and managed in a separate key vault.
TLS 1.3 In Transit
Every connection between your browser and Gun Vault uses TLS 1.3. No request ever travels in plaintext. HSTS is enforced at the edge so downgrade attacks can't talk the browser into weaker crypto.
bcrypt Password Hashing
Your password is hashed with bcrypt before it ever touches storage. Industry standard, one-way, salted. Even our own team can't read your password. If we're breached, your login is still useless to an attacker.
JWT Session Tokens
Sessions use short-lived JWT tokens signed with a per-installation secret. No session IDs sitting in a shared database. Revoking access is instant, and nothing is stored on the device you can't wipe yourself.
Isolated Document Storage
Tax stamps, bills of sale, and trust PDFs live in an encrypted object store separate from your core database. Signed, short-lived URLs for access. No public buckets, no hotlinkable attachments.
US-Based Infrastructure
All servers, backups, and document storage are hosted in US data centers. No data is replicated outside US jurisdiction. Your records don't get backed up to a server farm in another country.
Who can see your vault
A short, honest accounting. The default answer for most rows is "no" — but where the answer is "yes" or "limited," you should know the exact conditions.
"What about subpoenas?"
An honest, unvarnished answer. Gun Vault is a US company subject to US law, and we're not going to pretend otherwise.
The honest answer
If Gun Vault receives a valid, specific, court-issued subpoena directed at a named account, we comply with the law like every other US company. We don't pretend we're above the law.
But we defend you within the law. We do not respond to informal requests, fishing expeditions, overly broad warrants, or agency letters. We challenge defective process. We require specificity — your name, the records sought, the legal basis. We will not hand over a full vault dump because a letter arrived on government letterhead.
We will also notify you that your records were requested, unless we are explicitly barred from doing so by the court (a gag order). When we are barred, we work to lift the gag as soon as legally possible so you can be informed after the fact.
What you can do, anytime
No customer service ticket required. No waiting period. These controls live in your account settings.
Export Everything
Download your entire vault as CSV, PDF, or ZIP (photos + documents included). At any time, on any plan, including Free.
Delete Your Account
Self-service account deletion. Your data is wiped from our systems within 30 days, including backups. No "we'll keep it forever just in case" clause.
Revoke Executor Access
Remove or change your designated executors any time. The moment you revoke, their credentials stop working. No waiting period.
See What's On File
A "What We Know About You" summary lives in your account settings. It lists every field we store, including IP addresses from recent logins.
If the worst happens, you hear it from us first
If Gun Vault experiences a data breach, we will notify affected users within 72 hours of confirmation. No legal-team delays, no "still investigating" silence for months. A real breach, a real notification, with what happened and what records were affected. This is a commitment above what US law requires.
Security FAQ
The questions gun owners ask before they upload their first serial number.
Is Gun Vault a federal firearms registry?
Can the government force you to turn over user data?
Where is my data physically stored?
Does Gun Vault use my data to train AI or machine learning?
What if Gun Vault gets acquired or goes out of business?
How do you verify an executor after I die?
Do you use third-party analytics or tracking?
Is two-factor authentication available?
Can I audit what you've stored about me?
Your records, your rules.
Free to start. Free to leave. Free to know exactly what we store, who can see it, and what we will never do with it. That's the whole promise.
One Account. All Six Platforms.
The Complete Platform
Create one free account and it works across every site — ask questions, check values, verify serials, list, transfer, and store your collection. Sign in once, use all six.
The community Q&A hub for gun owners. Ask questions, get expert answers & find ranges, stores & FFL dealers near you. Free.
Ask The Community →
Free private sale estimates. Know your value before you list, trade, or transfer.
Value My Gun →
Run your serial number against private stolen gun registries. GunClear Certificate proves it’s clean. $10.
Check Serial # →
Free to list. In-state private sales. Background-checked transfers for $50 when your buyer is found.
List My Gun →
Background check, official bill of sale & lifetime digital records. Legal in most states. Flat $50 — no surprises.
Transfer a Gun →
Secure records, photos, history & succession planning for every firearm you own. Protect your collection. Free to start.
Open My Vault →The complete platform for gun owners.
Accessibility Statement
Our commitment
Gun Transfer America Inc. ("we," "us") is committed to making gunvault.co and all our services usable by the widest possible audience, including people with disabilities. We believe access to firearm record-keeping, estate planning, and vault management should not depend on a particular set of abilities.
Our goal is to meet or exceed the Web Content Accessibility Guidelines (WCAG) 2.1 Level AA standard, which is the benchmark cited by the ADA, Section 508 of the US Rehabilitation Act, and most state and international accessibility laws.
What we've done
We design and build gunvault.co with the following accessibility practices:
- Semantic HTML. Headings, lists, landmarks, and form labels are marked up correctly so screen readers can navigate effectively.
- Keyboard navigation. All interactive elements — buttons, links, form fields, modals — can be reached and operated with just a keyboard.
- Color contrast. Body text meets or exceeds the 4.5:1 contrast ratio required by WCAG AA. Headings and UI controls meet the 3:1 threshold.
- Responsive layout. Pages reflow cleanly at 320px wide and support browser zoom up to 400% without loss of functionality.
- Descriptive link text. Links tell you where they go ("See Pricing" rather than "click here").
- Form error messages. Validation errors appear inline, are announced to screen readers via
aria-live, and are not indicated by color alone. - Alt text for images. Meaningful images include descriptive alt text; decorative images are marked with empty alt attributes so they're skipped.
- No time limits. We don't force timed interactions. Sign-in codes expire after a generous window and can be resent.
- No auto-playing media. Video and audio only start on user action.
Compatibility
gunvault.co is tested against current versions of:
- Screen readers: NVDA (Windows), JAWS (Windows), VoiceOver (macOS / iOS), TalkBack (Android)
- Browsers: Chrome, Firefox, Safari, Edge — desktop and mobile
- Operating systems: Windows 10+, macOS 12+, iOS 15+, Android 10+
We don't test against legacy browsers (Internet Explorer, pre-2020 mobile browsers). If you use an older setup and find something doesn't work, please let us know — we'll do our best to provide an alternate path.
Known limitations
We're transparent about the areas where we're still improving:
- Third-party embeds. Authorize.net's payment form and other embedded services have their own accessibility characteristics we don't fully control. We've selected vendors with strong accessibility practices but cannot guarantee their implementations.
- PDF exports. Reports downloaded from the vault are rendered via your browser's print-to-PDF flow and inherit its accessibility. We don't currently generate tagged/accessible PDFs directly.
- Complex data tables. Detailed sorting and filtering in the vault dashboard is primarily mouse-driven. We plan to add full keyboard parity in a future release.
- Automated tests. We run manual accessibility checks on new pages; we don't yet have a comprehensive automated test suite running against every release.
Assistive technology support
If you use assistive technology and run into something that doesn't work for you, here's how we can help:
- Email support@gunvault.co with the page URL and a brief description of what happened.
- For time-sensitive issues (unable to complete a sign-up, transfer, or vault operation), write "ACCESSIBILITY" in the subject line and we'll prioritize it.
- We can provide requested information in an alternate format (plain text email, phone walkthrough) if a specific page isn't working for you.
We aim to respond to accessibility requests within two business days.
Feedback welcomed
Accessibility is an ongoing commitment, not a one-time checklist. If you encounter a barrier — anything from a screen-reader label that reads oddly to a form that won't accept your input — we genuinely want to know.
Email: support@gunvault.co (subject: ACCESSIBILITY)
Mail: Gun Transfer America Inc. · Attn: Accessibility · Ogden, Utah, United States
Formal complaints
If you believe we haven't responded adequately to a reported accessibility issue, you may file a formal complaint with the US Department of Justice Civil Rights Division (ada.gov) or your state's disability-rights agency. We would strongly prefer to address any concerns directly first — most issues can be resolved far faster that way.
