Privacy Policy

Effective date: September 29, 2026 · Last updated: September 29, 2026

Short version: ArmsFolio is local-first. Your firearms inventory, photos, and notes stay on your device by default. We do not operate a cloud inventory account. Optional passphrase encryption happens on-device. Contact us at feedback@armsfolio.com.

This Privacy Policy describes how SlavGuns (“we”, “us”) handles information in connection with the ArmsFolio web app (app.armsfolio.com), the ArmsFolio Android app (package com.slavguns.armsfolio), and the marketing site at armsfolio.com.

1. Local-first inventory

ArmsFolio stores your collection data (firearms records, photos, disposition notes, ammo counts, wishlist, FFL copies you save, settings, and backups you create) in on-device storage such as the browser’s localStorage / IndexedDB or the Android WebView equivalent. That data is not uploaded to an ArmsFolio cloud inventory service. There is no ArmsFolio account required to use the inventory features.

2. Optional passphrase encryption

You may enable an optional passphrase lock. When enabled, vault data is encrypted on-device with Web Crypto (AES-GCM; passphrase-derived key via PBKDF2). Your passphrase and derived keys never leave the device and are never sent to us. If you forget your passphrase and do not have a recovery backup you exported yourself, we cannot decrypt your vault.

3. What we do not collect by default

No cloud sync of your inventory, serial numbers, or photos
No ArmsFolio login / account profile for the vault
No sale of your personal inventory data
No advertising ID–based tracking of your collection contents

4. Network use and third parties

The app may use the network for limited, optional purposes that do not require uploading your vault:

Deals / affiliate links. The Deals area may show merchant offers and affiliate deep links (for example via 2A Media / partner networks). Following a deal opens a third-party site. Those merchants and networks have their own privacy policies. Purchases may generate a commission at no extra cost to you.
Optional content feeds. Public deal or community feed URLs may be fetched to display offers. Those requests do not include your inventory contents.
Hosting / CDN. Loading the PWA or marketing pages involves standard web hosting (e.g. Cloudflare) request logs such as IP address, user agent, and URL — typical for any website.
Email. If you email feedback@armsfolio.com, we receive whatever you choose to send (including your email address) so we can respond.

5. Permissions (Android)

Internet — load optional deals content and open links you choose.
Camera — optional QR inventory scan; photos for the vault are chosen by you and stored locally.

ArmsFolio does not require access to your full photo library or contacts to keep an inventory.

6. Backups and exports you create

CSV, JSON, PDF, and .gunvault backups are files you export and store yourself (Downloads, Drive, email, etc.). Once a file leaves the app, it is governed by wherever you put it. Encrypted backups remain encrypted with your passphrase.

7. Children

ArmsFolio is not directed at children under 13 (or the equivalent minimum age in your region). We do not knowingly collect personal information from children.

8. Changes

We may update this policy as the product evolves (for example if optional cloud features are ever offered — those would be opt-in and described clearly). The effective date above will change when we do.

9. Contact

Questions about privacy: feedback@armsfolio.com
Product: ArmsFolio by SlavGuns