Privacy Policy
Last updated:
This page explains what data NFAWait collects, what we don't, and how we use it. The short version: we collect almost nothing about you, we don't sell anything to anyone, and we use one analytics tool to count pageviews.
What we collect
Server logs. Like every website, our hosting server logs basic request metadata: your IP address (truncated), the page you requested, the time, and the user-agent string. We use these logs for security (detecting abuse) and basic traffic measurement. Logs are retained for 30 days, then deleted.
Aggregated analytics. We use a privacy-respecting analytics tool that does not use cookies, does not track you across sites, and does not collect personal data. We use it only to count pageviews. No data is shared with advertisers.
Email. If you email us at admin@nfawait.com, we keep your message and email address so we can respond. We don't add you to any mailing list. We delete correspondence after 12 months unless there's a reason to keep it (e.g., ongoing partnership).
What we do NOT collect
- Your name, address, phone number, or any personal identifiers (unless you email us those voluntarily)
- Your IP address beyond server logs (and logs are deleted after 30 days)
- Any data about which suppressors you own, what Form 1/4 you filed, or any NFA-specific personal information
- Cross-site tracking data
- Any data sold to third parties (we don't do this, period)
Cookies
We do not set any cookies for analytics, advertising, or tracking. The only cookies that may be set are first-party functional cookies if you interact with a feature that requires session state (e.g., if we add a "save your watchlist" feature in the future, that would set a session cookie). Currently, the site is cookie-free.
Third-party services
The site loads fonts from Google Fonts, which means Google sees your IP address when you load any page. This is unavoidable for any website using web fonts. We chose Google Fonts over self-hosting to keep the site fast and the build simple. If you want to avoid this, use a browser extension that blocks Google Fonts (most ad blockers do).
We do not embed any other third-party trackers, advertising networks, or social-media widgets.
Children's privacy
NFAWait is not directed at children under 18. We do not knowingly collect information from minors. NFA content is for adult gun owners and applicants only.
Data security
We use HTTPS everywhere. The data updater uses a shared-secret webhook token; if you'd like to disclose a security issue, see our contact page.
Your rights
If you have emailed us and want your message deleted, email admin@nfawait.com with "data deletion request" in the subject. We will delete within 30 days.
If you're a California resident, the CCPA grants you the right to know what data we hold about you (we hold: nothing, beyond your email if you've contacted us) and to request its deletion. Contact us at the address above.
If you're an EU/UK resident, the GDPR applies. Our data controller is the NFAWait team. Contact us at admin@nfawait.com for any data subject access request.
Changes to this policy
If we change this policy in a material way, we'll update the date at the top and post a note on the homepage for 30 days. We won't silently change what we collect.
Contact
Questions? Email admin@nfawait.com with "privacy" in the subject, or use the contact page.