Privacy notice

This page explains what the current Weapons.com site records when you explore it or ask to be notified about listings.

When you explore the site

We record what is typed into our site search, without identifying who typed it, to decide what to build next.

The site records certain actions—such as the goal you choose, your selected interest and state, and categories or topics you open or click—to understand which parts of the directory visitors use. Each event can include the time, an identifier for your browser tab session, the referring page (if provided by your browser), your browser’s user-agent string and a shortened, salted hash of your IP address when the site’s private salt is configured. The site does not save your raw IP address in its events or signup tables. The session identifier is kept in your browser’s session storage so actions in that tab can be grouped together; it is sent with activity and signup requests.

When you sign up

If you request updates, the site saves your email address (converted to lowercase), selected goal, interest, state, session identifier, signup source, and a shortened salted IP hash when configured, along with creation and update times. These forms collect interest in updates and do not send automatic emails. Submitting the same email again updates its goal, interest, state, session, source and update time, rather than creating a second signup. The original creation time and IP hash remain on that record.

On the laws path, we compare the existing notification offer with a state law alerts offer. Your A or B assignment and a flag recording whether you have seen the offer stay in your browser’s session storage. Experiment impressions are saved as daily counts by variant and selected state. If you sign up through one of these offers, we save your email address, state (if selected), variant, creation time and the wording of the offer. The consent records contain no session identifier, IP address or browser information. Separately, signup visibility and successful signup events are recorded with the current session, source and selected directory context to measure conversion; these events do not contain your email. Neither the consent records nor conversion events contain search queries or search-record identifiers. Variant A consents to generic launch updates, not law alerts. Variant B consents only to free emails about verified changes to carry, purchase or transport rules in the selected state: no other email, and not legal advice.

Session storage flags prevent repeat visibility counts for each signup placement. Local storage flags remember dismissal of the bottom updates bar and hide it after a successful signup; no email is stored in those flags. Addresses ending in @test.weapons.com or containing +wctest, and sessions identified through those test signups, are excluded from signup reporting.

Law-alert sending is disabled until the owner launches the service. Every alert requires an explicit admin review and send action and includes an authoritative source and effective date. When sending is enabled, Resend processes your email address and the alert content to deliver the message. We save delivery attempts, provider message identifiers and delivery statuses separately from visitor and search data. Provider acceptance does not guarantee inbox delivery. We do not put email addresses or unsubscribe links in application logs.

Every law alert includes a secure one-click unsubscribe link, with no sign-in required. Using it opts that email address out of all states’ law alerts; it does not delete the signup record. We retain the opt-out address and date to prevent future mail, and retain secure unsubscribe-token hashes so links continue to work. Repeat signup attempts do not remove an opt-out. Bounced addresses and spam complaints are also suppressed when the admin refreshes delivery statuses.

How the site uses and displays the information

Activity and signups are stored in the site’s PostgreSQL database. The password-protected admin area shows aggregate activity and recent signups, and allows an admin to download a CSV of signup email addresses, interests, states and creation times. When enabled on the published site, Replit-hosted analytics also measures page visits and actions such as goal and state selections, topics opened, notification signup outcomes, business-interest starts and social-link clicks. These custom events include selected directory options, not your email address or other form input. The site also loads fonts from Google Fonts, which involves a request from your browser to Google. This notice does not describe any other service’s own data practices.

Removal requests

Weapons.com’s owner has designated info@swells.com as the contact for removal requests. To request removal of a signup or site activity, email that address. For a signup, include the email address you used. Activity records are associated with a session identifier rather than your email address, so your email alone may not identify them; include any details you have about the visit, such as its approximate date and the actions you took. There is no self-service removal form or automatic deletion schedule in the current site.