Privacy policy

This policy says what AmmoFans keeps about you, what it is used for, who can see it, and what you can do about it. AmmoFans is run by Altafinity, and every question about your data goes to [email protected].

What is collected

To hold an account

Your email address, your username, and your password. The password is kept only as a hash, so nobody at AmmoFans can read it. With them go the version of the terms of service you agreed to and the day you registered. A code mailed to you to confirm an address or reset a password is checked, never stored.

What you add

Everything you write, log, and upload is kept as you gave it: your display name, bio, profile picture, cover photo, what you shoot, and where you say you are; your journal entries, with the photos, rounds, times, and equipment on them; the drills you write and the runs you log; the events you add and what you say about going; the venues you name; your equipment list; the comments, reactions, and saves you make; the messages you send; whom you follow, block, and hide; and the reports you file, with their reason and note.

Where you say you are is kept in your own words and, if you picked a place, as that place: a city, a neighborhood, or a postal code, and never finer. AmmoFans positions you by that place alone; the words you typed are shown to other members as you typed them, so write no more than you want read. The time zone your device reports is kept with each entry, so its day reads as yours.

From your browser

Which parts of AmmoFans you open, requests from them that failed, and errors in them are reported, so a problem shows up before you have to report it. They are tied to an anonymous id rather than to your account. What you typed into a search is never part of it, and neither are your messages, your email address, or your password.

On ammofans.net, Cloudflare counts the pages opened, for AmmoFans, and sets no cookie to do it. What it reads to count them, and how long it keeps them, is in Cloudflare's privacy policy.

The network address your browser connects from is read on every request, to bound how many requests one address may make when nobody has signed in and to keep a sign-in from being guessed at. It is not kept with your account.

Cookies

AmmoFans sets cookies only to keep you signed in and to keep the app working, and none to advertise or to follow you across other sites.

• On ammofans.net, three sealed cookies carry your session: one holds your sign-in for fifteen minutes at a time, one renews it for as long as the browser stays open, and one lasts ten minutes while a sign-in is under way. Only AmmoFans' own server can read them.
• On id.ammofans.net, one cookie remembers that you signed in: for the browser session, or for thirty days when you asked to be kept signed in.
• The error and usage reporting keeps an anonymous id for a year and a session id for thirty minutes, on ammofans.net and login.ammofans.net.
• Cloudflare, which stands in front of every AmmoFans address, may set cookies of its own to tell a browser from a bot.
• Your choice of a light or dark appearance stays in your browser's own storage and is sent nowhere.

What it is used for

• To run AmmoFans: to sign you in, to show what you share to the people you chose, to find shooters, events, and venues near where you said you are, and to send you the mails you asked for. AmmoFans mails you only to confirm an address, to reset a password, to verify a change, to tell you when your sign-in address has changed, and to warn you when someone tries to sign up or change an address with yours. Nothing is sent to you for marketing.
• To keep it working: the reports from your browser and from the servers say where something broke.
• To keep it safe: how many requests an address or an account may make is limited, a wrong password counts toward a lockout, signing in, signing up, and resetting a password each check that a person is at the keyboard, and every report is reviewed.
• To know whether AmmoFans works: how many accounts are created and from what kind of page, how many entries are written and follows accepted, and how many public pages are shown to people without an account is counted in totals by the week, never by who did it.

Nothing you give is sold, and nothing is used to advertise to you or to build a profile of you for anyone else.

Who can see what you share

You choose, for each thing, whether it is public, for the followers you accept, or private, and you can change it later. A private account keeps everything you share for the followers you accept; anyone signed in still sees your name, picture, and counts.

• People without an account see your profile only while your account is public and you let them, and never what you are going to. Search engines list it only if you say so. A public event you add is shown to them and to search engines too, without your name, without who is going, and without a place finer than a stranger needs. So is a public drill you write, without your name and without who has run it.
• AI tools, whether they train a model, answer a search, or fetch a page for someone's assistant, may read a public drill's page, the terms of service, and this policy, and nothing that places a member: no profile, event, photo, run, entry, or message, and nothing on the addresses you sign in at.
• Whether you are going to an event is read only by the followers you accept and by whoever invited you.
• Your equipment list is read by you alone. What you took to the range reaches others only if you write it in an entry.
• A message is read by the people in the conversation. Once sent, it is theirs as much as yours.
• A venue you add is found by other members only if you made it public. It is placed no finer than a postal code, and the street line you wrote is shown, as you wrote it, to whoever sees the venue.
• A report you file is never published and never told to the member it is about. It is read by the people who run AmmoFans, together with the thing it is about, whatever that thing's audience.

Who else handles it

AmmoFans runs on Microsoft Azure in the United States, which hosts the app, its databases, the photos you upload, the error and usage reports, and the mail it sends. Cloudflare stands in front of every AmmoFans address, checks that a person is at the keyboard when you sign in, sign up, or reset a password, and counts the pages opened on ammofans.net. What passes through it, it handles under its own privacy policy.

Nobody else is given what you share. What you gave may be disclosed when the law requires it, or when a report describes an immediate danger to a person. If AmmoFans changes hands, what you gave it goes with it under this policy.

How long it is kept

• While your account is open, everything you gave AmmoFans is kept.
• Something you delete or unsend is shown to nobody again. Its record stays, marked deleted, until your account closes, so that a report about it can still be reviewed.
• When you close your account, which asks for your password, your account, your profile, and everything you added are deleted at once and for good, your username is available again, and your photos are removed from where they were kept. A photo can stay there, with nothing on AmmoFans pointing to it, if the store could not be reached at that moment. Three things outlive it because they are other people's too: a message you sent stays in their conversation with a former member's name where yours was, a venue you named stays as a place with your name taken off it, and a variation another member made of your drill stays theirs.
• Database backups are kept for seven days, so a copy of what you deleted can persist that long.
• Error and usage reports are kept for thirty days.

Your choices

From your settings you can change your username, email address, and password; make your account private; decide whether people without an account and search engines see your profile; say who may message you and whether they see how far you have read; block and hide members; and close your account. Anything you added, you can edit or delete where it is.

For a copy of what AmmoFans holds about you, a correction, or a deletion, write to [email protected] from the address on your account. Where the law where you live gives you rights over your data, exercise them the same way. Nothing is sold or shared for advertising, so there is nothing to opt out of.

Children

AmmoFans is not for anyone under 13, and no account is knowingly kept for one. If a child under 13 has an account, write to [email protected] and it will be deleted.

Security

Your password is kept as a hash, your session travels in cookies only AmmoFans' own server can open, every connection is encrypted, and a code mailed to you is typed in rather than followed as a link. Wrong attempts lock the account for a while. No system is beyond a breach; if one reaches your data, you will be told.

Changes to this policy

When this policy changes, the date at the top changes with it, and what changed is said here.

• October 4, 2026: a public drill is shown to people without an account and to search engines; AI tools may read a public drill's page, the terms of service, and this policy; Cloudflare counts the pages opened on ammofans.net; and what is counted names events and drills shown to people without an account and the kind of page an account was created from.
• September 27, 2026: the policy was rewritten to say in full what is kept, why, who sees it, who else handles it, how long it is kept, and what you can do about it.
• September 25, 2026: the pages you open, their failed requests, and their errors are reported to find problems, tied to an anonymous id.
• September 20, 2026: first published.