Privacy

Human+AI Ventures LLC, operator of FFLSearchTool.com. Last revised 6 September 2026.

If you are looking for a dealer

You do not need an account and we do not ask for your name. Searching stores an anonymous session identifier — a random value in your browser, with no name, email or address attached — the ZIP or coordinates you searched, and which listings you looked at, so we can tell whether the site is answering people’s questions.

If you use the “find dealers near me” button, your location is used to run that one search and is not stored.

We store a one-way keyed hash of the IP address a request came from, for rate limiting and abuse investigation. We do not store the address itself.

If you ask for alerts when new dealers open near you, we store the email address and ZIP you gave us for that purpose, and we pass them to our email provider so the alert can be sent. Every alert has an unsubscribe link.

If you are a dealer

Your listing starts from the ATF’s monthly published FFL list, which is public information we did not collect from you. Where that comes from.

When you claim a listing we store:

• your email address and a hash of your password — never the password;
• the fact that a specific claim code was redeemed, and when;
• a hashed IP address for the redemption, for fraud investigation;
• every change you make to your listing, with the field, the old value and the new one, so there is an honest record of who published what.

The claim code itself is stored only as a keyed hash. Attempted codes are never stored at all — a failed attempt records that it failed and nothing else, so this system can never become a list of codes somebody tried.

The information you publish on your listing — transfer fee, hours, website, phone, trading name — is meant to be public. That is the point of publishing it. Everything else above is not published.

Payments

If you buy an optional paid service, the payment is taken by our payment provider on their own pages. Card details never reach this system, and we do not store them. We keep the provider’s customer and subscription identifiers, your plan, its status and its renewal date, so your account page can tell you what you are paying for.

Who else sees any of this

Our hosting, database and email providers, in the ordinary course of running the service. Our payment provider, if you buy something. We do not sell personal information, and we do not share it for anybody else’s advertising.

The site links to other businesses in the same group. Following one of those links takes you to a different site with its own privacy notice.

How long we keep it

Listing content stays for as long as the listing exists. Claim and edit audit records are kept because they are what makes the listing’s history honest. Search events are aggregate operational data. Ask us to delete something and we will tell you plainly what we can and cannot remove, and why.

Asking us anything

Contact us here — including to see what we hold about you, to correct it, or to ask us to delete it. A person reads every message.

Cookies and storage

We do not use advertising cookies. The site keeps a few values in your browser’s local storage: the anonymous session identifier described above, and — if you are a dealer who has signed in — your sign-in token and which of your listings you were last editing. Clearing your browser storage removes all of them and signs you out.