Privacy Policy

Your privacy is important to us. This policy explains how we collect, use, and protect your information.

GDPR CompliantCCPA CompliantKVKV Compliant

Last updated: July 2025

Quick Overview

Here's what you need to know about our privacy practices:

Data Minimization

We only collect data necessary for our services

Secure Storage

Your data is encrypted and securely stored

No Selling

We never sell your personal information

Your Rights

You can access, modify, or delete your data anytime

Contact Information

For any privacy-related questions or requests, contact us:

Privacy Officer

privacy@thegundatabase.com

Data Protection Officer (EU)

dpo@thegundatabase.com

1. Information We Collect

We collect information to provide and improve our services.

Information You Provide Directly

• Account Information: Name, email address, password (encrypted)
• Profile Information: Optional profile picture, preferences
• Communications: Messages you send us, feedback, feature requests
• User Content: Comments, reviews, or other content you create

Information We Collect Automatically

• Usage Data: Pages viewed, weapons searched, time spent on site
• Device Information: Browser type, operating system, device identifiers
• Location Data: General geographic location (country/region level)
• Cookies & Tracking: As described in our cookie policy

Information from Third Parties

• Social Login: Basic profile information if you sign in with Google/GitHub
• Analytics: Aggregated usage statistics from Google Analytics

2. How We Use Your Information

We use your information for specific, legitimate purposes.

Service Provision

• Create and manage your account
• Provide access to weapon database and features
• Remember your preferences and settings
• Enable user dashboard functionality

Communication

• Send important account and service updates
• Respond to your inquiries and support requests
• Send feature updates (with your consent)

Improvement & Analytics

• Analyze usage patterns to improve our services
• Understand which weapons and features are most popular
• Identify and fix technical issues
• Develop new features based on user behavior

Legal & Security

• Comply with legal obligations and law enforcement requests
• Protect against fraud, abuse, and security threats
• Enforce our terms of service
• Maintain consent records for privacy compliance

3. Legal Basis for Processing (GDPR)

Our legal justification for processing your personal data under EU law.

Consent

Analytics, marketing communications, and optional features require your explicit consent.

Contract Performance

Account creation and service provision are necessary to fulfill our service agreement.

Legitimate Interest

Security, fraud prevention, and service improvement serve our legitimate business interests.

Legal Obligation

Some data processing is required by law, such as maintaining consent records.

4. How We Share Your Information

We limit data sharing to essential service providers and legal requirements.

Service Providers

• Hosting: Secure cloud infrastructure providers
• Analytics: Google Analytics (with your consent)
• Email: Transactional email service providers
• Authentication: OAuth providers (Google, GitHub) for login

Legal Requirements

We may disclose information when required by law, court order, or to protect our rights and safety.

Business Transfers

In the event of a merger, acquisition, or sale, your information may be transferred to the new entity.

We Never:

• Sell your personal information to third parties
• Share your data for advertising purposes without consent
• Provide your information to data brokers

5. Your Privacy Rights

You have comprehensive rights regarding your personal data.

Universal Rights (All Users)

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal data
• Portability: Receive your data in a machine-readable format
• Opt-out: Unsubscribe from marketing communications

EU Users (GDPR Rights)

• Restriction: Limit how we process your data
• Objection: Object to processing based on legitimate interest
• Automated Decision-Making: Opt out of automated profiling
• Withdraw Consent: Revoke consent for specific processing
• Supervisory Authority: File complaints with your local data protection authority

California Users (CCPA Rights)

• Know: Know what personal information we collect and how it's used
• Delete: Request deletion of personal information
• Opt-out: Opt out of the sale of personal information (we don't sell)
• Non-discrimination: Equal service regardless of privacy choices

Turkish Users (KVKV Rights)

• Information: Learn whether your data is being processed
• Purpose: Know the purpose of data processing
• Third Parties: Know who your data is shared with
• Completion: Request completion of incomplete data
• Notification: Request notification of corrections to third parties

How to Exercise Your Rights

Email us at privacy@thegundatabase.com with your request. We'll respond within 30 days (or sooner as required by local law).

6. Data Security

We implement comprehensive security measures to protect your information.

Technical Safeguards

• End-to-end encryption for data transmission
• Encrypted storage of sensitive information
• Regular security audits and vulnerability assessments
• Secure authentication and session management
• Regular software updates and security patches

Organizational Measures

• Limited access to personal data on a need-to-know basis
• Regular privacy and security training for staff
• Data breach response procedures
• Privacy impact assessments for new features

7. Data Retention

We keep your data only as long as necessary for our services and legal obligations.

Account Data

Retained while your account is active and for 30 days after deletion (for recovery purposes).

Usage Analytics

Aggregated, anonymized data retained for up to 26 months for service improvement.

Legal Records

Consent logs and legal compliance records retained for 7 years as required by law.

Communications

Support communications retained for 3 years for quality assurance and legal purposes.

8. International Data Transfers

How we handle data transfers across borders with appropriate safeguards.

EU Data Transfers

We use Standard Contractual Clauses (SCCs) and adequacy decisions for transfers outside the EU. All service providers are required to provide equivalent data protection.

US Data Processing

Some data may be processed in the United States under appropriate safeguards and with your consent.

Turkish Data Localization

Turkish users' critical personal data is processed in compliance with KVKV localization requirements.

9. Children's Privacy

Our services are not intended for children under 13 (or 16 in the EU).

We do not knowingly collect personal information from children under 13 years of age (or under 16 in the European Union). If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately and we will delete such information.

10. Cookies and Tracking

How we use cookies and similar technologies.

We use cookies and similar technologies to enhance your experience, analyze usage, and provide personalized content. You can manage your cookie preferences through our cookie consent banner or by clicking the "Cookie Preferences" button in our footer.

Cookie Categories:

• Necessary: Essential for website functionality
• Analytics: Help us understand how you use our site
• Functional: Remember your preferences and settings
• Marketing: Personalize content and advertisements
• Advertising: Deliver relevant advertisements

11. Changes to This Privacy Policy

How we handle updates to our privacy practices.

We may update this privacy policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website and, where required by law, by email or through our service. Your continued use of our service after such changes constitutes acceptance of the updated policy.

12. Contact Us & File Complaints

How to reach us with questions or concerns about your privacy.

Contact Information

Privacy Officer: privacy@thegundatabase.com

Data Protection Officer (EU): dpo@thegundatabase.com

General Inquiries: support@thegundatabase.com

Supervisory Authorities

EU Users: You can file complaints with your local data protection authority

Turkish Users: Contact the Personal Data Protection Authority (KVKK)

California Users: Contact the California Attorney General's Office

Response Times

• General inquiries: Within 5 business days
• Privacy rights requests: Within 30 days
• Data breach notifications: Within 72 hours (where required)

This privacy policy is effective as of July 2025 and applies to all users of The Gun Database.