Privacy Policy

This policy explains what Top2A collects, how we use it, and your choices.

Information we collect

Account details (email, display name, password - stored only as a secure hash); order and transfer information such as the firearm dealer you select and your ship-to state; order history and support messages; and basic technical data (IP address, browser) used to operate and secure the site. We do not receive or store your payment card number - card data is tokenized in your browser by our payment processor (Authorize.Net) and never reaches our servers (PCI SAQ-A).

How we use information

To process and ship your orders, route firearms to your chosen licensed dealer, run compliance and fraud checks, provide customer support, and send order and account email. We use it to operate, secure, and improve the service and to meet our legal and recordkeeping obligations.

How we share information

Only with the service providers needed to complete your order - your receiving FFL, our payment processor, and our shipping and email providers - and when required by law or to protect our rights. We do not sell your personal information.

Cookies

We use essential cookies for sign-in sessions, security (anti-forgery), and the age-confirmation gate - these are required for the site to function. We may also use analytics cookies to understand how the site is used and improve it; you can opt out of these as described below.

Your choices and rights

You can review or update your account information at any time and unsubscribe from non-essential email. Depending on your state, you may have rights to access, correct, or delete your personal information, or to opt out of certain sharing; contact us to exercise them.

Your privacy choices (California and similar states)

Top2A does not sell your personal information, and we do not share it for cross-context behavioral advertising. California residents (and residents of states with similar laws) have the right to know what personal information we collect, to request access or deletion, to correct inaccurate information, and to be free from discrimination for exercising these rights. To exercise any of these rights, or to opt out of analytics, contact us using the details below and we will verify and respond as required by law. You can also opt out of analytics cookies through your browser's tracking-protection or "Do Not Track" / Global Privacy Control settings, which we honor.

Security and retention

Passwords are hashed and integration secrets are encrypted at rest. We keep records as long as needed to provide the service and to comply with legal and recordkeeping requirements, then delete or anonymize them.

Children

This site is not directed to anyone under the legal purchase age, and we do not knowingly collect information from minors.

Contact

Questions about your privacy, or want to exercise a right above? Contact Top2A. See our Contact page for more ways to reach us.