Privacy Policy

Last updated: May 10, 2026

Overview

This policy explains what we collect, how we use it and what choices you have. We do not sell personal data.


Information We Collect

We collect only the limited information needed to operate the Site:

  • Usage data — anonymous page view data (e.g. pages visited, browser type, country) collected via Cloudflare Web Analytics. No cookies are set; no personal identifiers are stored.
  • Contact messages — if you submit our contact form, we retain your name, email address, optional subject line, and message content solely to respond to your inquiry.
  • Email updates — if you submit one of our email capture forms, we retain your email address, the page where you signed up, basic source metadata and timestamps so we can send the requested updates and operate that list.
  • Newsletter subscriptions and draft issues — if you subscribe to the HandgunCloud newsletter, we retain your email address, list status, source page, and unsubscribe metadata so we can send the requested updates. Subscriber email addresses and unsubscribe tokens are stored in encrypted form, and we also keep hashed identifiers to operate the list safely. Newsletter issue drafts may contain internal editorial text and links to product pages, but they do not include subscriber lists.
  • Browser-stored lists and preferences— we store your selected theme, compare list, wishlist gun IDs and saved Gun Finder searches in your browser'slocalStorage so those features persist on your device. This data is stored locally in your browser and is not used for advertising or cross-site tracking.
  • Price alerts — if you subscribe to a gun price alert, we retain your email address, the gun you selected, your chosen threshold, alert status, and unsubscribe metadata so we can send the requested alert. Price alert email addresses and unsubscribe tokens are stored in encrypted form, and we also keep hashed identifiers to operate the alert safely. Once an alert is triggered or you unsubscribe, we remove the stored email address and unsubscribe token data from that alert record.
  • Security and abuse-prevention data — when you use the contact form, newsletter signup, or price alert signup, we process request metadata such as your IP address and store a hashed rate-limit key plus request-window metadata to protect the Site against spam, abuse, and automated misuse.

We do not use tracking pixels, third-party ad networks or any technology that builds personal profiles about you.


Cookies

HandgunCloud does not set advertising or tracking cookies for the public Site. We do use your browser's localStorage to keep a few on-device features working, including your chosen theme, saved comparison list, wishlist and saved Gun Finder searches. That browser-stored data stays on your device unless you clear it or remove those items through the Site.


Affiliate Links & Third-Party Sites

When you click an affiliate link and visit a retailer's website, that site's own privacy policy applies. We do not control how third-party sites collect or handle your data.


Analytics

We use Cloudflare Web Analytics to understand how visitors use the Site. Cloudflare Web Analytics is privacy-first: it does not use cookies, does not track individual users across sites or collect personal information. Data is aggregated and anonymized.


Service Providers

We use a small number of service providers to operate the public Site and deliver requested features. These currently include Google Cloud and Firebase for hosting, application data, and supporting infrastructure; Algolia for on-site search and related search responses; Cloudinary for hosted site images and media delivery; Resend for contact-form messages, newsletter emails, and price alert emails; and Cloudflare Web Analytics for aggregated, privacy-focused traffic reporting.


Data Retention

Aggregated analytics data is retained per Cloudflare's standard retention policy. Contact messages are deleted once your inquiry is resolved. Email update signups are retained until you ask us to delete them or until we decide to retire that list. Newsletter subscriber email and unsubscribe token data are retained while the list is active and are removed when you unsubscribe or when we retire the list. Price alert email and unsubscribe token data are removed once an alert is triggered or when you unsubscribe from that alert. Hashed rate-limit entries are retained only for the applicable request window and related operational lifecycle used to protect the public forms from abuse. Browser-stored theme, compare, wishlist and saved-search data remain on your device until you remove them in the Site or clear your browser storage.

If you send us a deletion request through the contact form, we aim to acknowledge it within 5 business days and complete the deletion of data we still retain within 30 days, unless a longer period is required to verify the request or comply with law.


Your Rights

You can request access to, correction of, or deletion of the personal information we retain about you. In practice, that most commonly applies to contact messages, newsletter signups, email capture records, and price alerts. For newsletters and price alerts, you can also use the unsubscribe link in the email. Browser-stored compare, wishlist, theme, and saved-search data can be removed directly from this device through the Site or by clearing browser storage.

To help us process a deletion request quickly, use the same email address you used on the Site and tell us whether the request relates to a contact message, newsletter signup, another email capture form, or a price alert.


California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), gives you additional rights regarding your personal information. This section applies only to California residents.

In the last 12 months, we have collected the following categories of personal information when you choose to use the related features: identifiers such as email address; records of contact messages you send us; commercial or preference information tied to newsletter signup, price alerts, compare lists, wishlists, theme settings, and saved searches; and internet or other electronic network activity information such as aggregated analytics data. We collect this information directly from you, automatically from your browser when you use the Site, and from the services that help us operate newsletters, price alerts, analytics, and site functionality.

We use that information to operate the Site, deliver requested newsletters and price alerts, respond to contact requests, maintain security, improve site performance, and keep browser-based features working on your device. We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.

  • Right to Know — You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of that information, the business purposes for collecting it, and the categories of third parties to whom it has been disclosed.
  • Right to Delete — You may request deletion of any personal information we have collected from you, subject to any lawful exceptions.
  • Right to Correct — You may request correction of inaccurate personal information we maintain about you.
  • Right to Non-Discrimination — We will not discriminate against you for exercising any of your CCPA/CPRA rights.
  • Right to Opt-Out of Sale — We do not sell personal information. There is nothing to opt out of.
  • Right to Opt-Out of Sharing — We do not share personal information for cross-context behavioral advertising.
  • Right to Limit Use of Sensitive Personal Information — We do not use or disclose sensitive personal information to infer characteristics about you, and we only use personal information as needed to provide the features you request or to operate the Site.

To exercise your California privacy rights, use our contact form. We may need to verify your request before completing it. Authorized agents may also submit requests on your behalf if they provide sufficient proof of authority. We aim to confirm receipt of a verifiable request within 10 business days and to respond within 45 days, or notify you if additional time is reasonably required.

For retention details, see the Data Retention section above.


Age Restriction

HandgunCloud is not directed at children. We do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has submitted personal information to us, please contact us immediately and we will delete it.


Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page shows the most recent revision. If you continue using the Site after changes are posted, the updated policy will apply.


Contact

Privacy questions or requests can be submitted through our contact form.