Privacy Policy
The short version: your records never reach us, because there is nothing for them to reach. ArsenalDB has no server, no accounts, and no database of users. Everything you enter is stored on your own device. The only network traffic the app ever sends is traffic you deliberately trigger — described below — and none of it ever includes your firearm or inventory data, except AI requests you choose to send with your own key.
1. Where your data lives
Every record you create — firearms, photos, documents, range sessions, maintenance logs, transfers, people — is stored locally in your browser's built-in database (IndexedDB and localStorage) on the device you're using. There is no ArsenalDB account, no cloud copy, and no background sync. We never see, hold, transmit, or store your data, and we could not produce it if asked — it isn't in our possession.
The flip side of that promise: you hold the only copy. If you clear your browser's site data or lose the device, your records are gone unless you have a backup.
2. What we don't do
- No analytics or telemetry — the app phones home to no one.
- No tracking, no advertising, no third-party trackers.
- No crash or error reporting that leaves your device.
- No selling or sharing of user data — we have none to sell.
3. The two kinds of network traffic that exist
(a) Optional AI features (Pro+, off by default). The AI Gun Identifier, AI Valuation, and Armorer assistant run only when you explicitly use them, and they require your own Anthropic API key, which you supply in Settings and which is stored only on your device. When you run an AI feature, the specific photo or details you chose to submit are sent directly from your browser to Anthropic (api.anthropic.com) — not through us; there is no "us" in the middle. No AI request ever runs automatically. Data you send to Anthropic is handled under Anthropic's privacy policy.
(b) Purchases and license activation. Paid upgrades are processed by Lemon Squeezy, our payment processor and merchant of record; checkout happens on their pages under their privacy policy, and we never see your payment details. When you activate or validate a license, the request carries license metadata only — your license key, a device instance identifier and name, and the store/product identifiers. License and checkout traffic never contains firearm or inventory data — not in any payload, URL, or identifier.
4. Backups are yours
The backup feature writes a single file to your device containing your full vault — collections, photos, documents, records, and your license key so a restore brings your purchase back with it. We never receive backup files. Where you keep them, and whether you share them, is entirely your decision — treat a backup like the sensitive file it is.
5. The website itself
arsenaldb.com is a static site served by GitHub Pages. Like any web host, GitHub receives the standard technical data needed to deliver a page (such as your IP address and browser type), governed by GitHub's privacy statement. The marketing pages load fonts from Google Fonts, which involves the same kind of standard request to Google. The app itself makes no such font requests. We add no analytics or tracking scripts to any page.
6. Email
If you email hello@arsenaldb.com, we receive whatever you choose to send and use it only to respond — typically support, license, and activation help. We don't add you to marketing lists.
7. Children
ArsenalDB is a firearms record-keeping tool for adults and is not directed at children.
8. Changes to this policy
If this policy changes, the new version will be posted here with an updated effective date. The core promise — your records stay on your device — is the product's design, not a revocable setting.
9. Contact
Questions about privacy: hello@arsenaldb.com.