FFL Transfer Directory

Privacy Policy

Last updated: June 2026

This policy describes what information the FFL Transfer Directory collects and how it is used. The short version: we do not sell your information, and we do not share it outside the functionality described on this site.

Information we collect

  • Public licensee records. Dealer names, license numbers, addresses, and license types come from the ATF's published Federal Firearms Licensee list, which is public information.
  • Account information. If you create an account: your email address, and any contact details you provide when claiming a listing.
  • Dealer-submitted content. Listing details dealers choose to publish (fees, hours, policies, requirements) and documents they upload (FFL/SOT copies, transfer forms).
  • Document requests. When a dealer requests another dealer's FFL or SOT, the request and any details included (note, customer name/phone, item details) are stored and shared only with the dealer who owns the document.
  • Usage data. Basic, aggregate analytics (listing views and search counts) and standard server logs (IP addresses) used for security, anti-abuse, and improving the directory.
  • Feedback. Messages and email addresses submitted through the feedback form.

How we use it

  • To operate the directory: displaying listings, processing claims and edits, delivering document requests and notification emails, and providing the read-only API.
  • To verify dealer identity: license documents uploaded during a claim are stored privately, reviewed only by our staff, and never shown publicly.
  • To protect the service: rate limiting, abuse prevention, and audit logging of account and listing changes.

What we don't do

  • We never sell your information — not to advertisers, data brokers, or anyone else.
  • We never disseminate your information outside the functionality outlined on this site. Your data is used to run the directory features you see and nothing else.
  • We don't run third-party advertising or tracking networks.

What is visible to others

  • Listing content a dealer chooses to publish is public, including through the API. Each contact field has a visibility toggle — only fields marked public are shown.
  • FFL/SOT copies shared by a dealer are visible only to logged-in, verified dealers, per the access level the owner chooses (open download or approve-per-request).
  • The private notification email used for your account is never displayed.

Service providers

We use infrastructure providers to run the site — hosting, content delivery (Cloudflare), and email delivery (Amazon SES). They process data only as needed to provide those services on our behalf.

Cookies & analytics

We use the cookies required for the site to function (a session cookie for logged-in users and a CSRF protection cookie), and Google Analytics to understand aggregate site usage — page views and traffic sources, not your identity. Analytics data is not used for advertising and, like everything else, is never sold.

Data retention & your choices

Account and listing data are retained while your account is active. You can update your listing's public fields at any time, change document sharing levels, or contact us via the feedback page to request account deletion or removal of dealer-submitted content.

Changes to this policy

If this policy changes, we'll update this page and its "last updated" date. Material changes affecting dealer accounts will be announced by email.