Chambered

Builder · Education · Compliance

Privacy Policy

Last updated: February 2026

Chambered is designed to be useful without collecting much about you. This page explains what we do collect, why, and how you can request deletion. Written in plain English — no dark patterns.

What we collect

  • Account data (only if you sign in): your email address and display name, sourced from your Google account via our authentication provider. We never see your Google password.
  • Anonymous session identifier: a UUID generated client-side and stored in your browser to remember your recent builds. This UUID is not linked to any personal identifier unless you also create an account.
  • Build history (only if you sign in): the firearm configurations you save. Stored so you can return to them across devices.
  • Server logs: standard HTTP request logs (IP address, timestamp, user agent, referrer, requested URL) retained for up to 30 days for security and abuse detection.
  • Aggregate analytics: if we’ve wired Google Analytics 4 (see the Cookies section), we collect anonymous usage patterns — pages viewed, referring source, approximate country. GA4 uses cookies subject to your consent.

What we don’t collect

  • Firearm ownership data. We never ask what you own.
  • Concealed carry permit status, background-check history, or any other regulated firearm record.
  • Payment data. Chambered doesn’t process transactions — purchases happen on the retailer’s site.
  • Cross-site advertising identifiers. We do not participate in behavioral ad networks or sell any data to third parties.

How we use what we collect

  • Sign you in and remember your saved builds.
  • Debug bugs and detect abuse (server logs).
  • Improve content and features (aggregate analytics — never individual profiles).

Sharing & third parties

  • Google (authentication): if you sign in with Google, Google receives the standard OAuth handshake data required to authenticate you. Their privacy policy applies to that transaction.
  • MongoDB Atlas (hosting): your account and build records are stored in a managed MongoDB instance. MongoDB acts as a processor.
  • LegiScan (public legislative data): we pull pending-bill data from LegiScan’s public API. We do not send them any user data.
  • Retailer affiliate networks (guns.com, AvantLink, etc.): when you click an outbound retailer link, the retailer’s cookie may be set to attribute the referral to Chambered. We never share your account data with retailers. See the affiliate disclosure.

Cookies

Chambered uses the minimum cookies required to run the site: a session cookie for authentication and a client-side UUID for build history. If Google Analytics 4 is enabled you may also see _ga, _gid, and _ga_XXXXXX cookies. All non-essential cookies can be cleared through your browser at any time without breaking core site functionality.

Your rights (CCPA / GDPR)

You have the right to request a copy of the data associated with your account, and the right to have that data deleted. To exercise either right, email us from the account’s registered address via the contact page. We’ll respond within 30 days.

Children

Chambered is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe we have inadvertently done so, contact us and we’ll delete it.

Changes

When this policy changes, we’ll update the “last updated” date at the top and, for material changes, post a notice on the homepage for at least 30 days.