Privacy Policy

Who we are, and what this covers

Colorado Gun Laws (gunlawscolorado.com) is an independent reference site about Colorado firearms law, operated from Denver, Colorado, United States ("we", "us", "our"). It is not a law firm and provides no legal services — see the disclaimer and terms of use.

This Privacy Policy covers the website at gunlawscolorado.com and the server functions behind its two forms. It does not cover the third-party sites we link to — the Colorado General Assembly, the Colorado Bureau of Investigation, Colorado Parks & Wildlife, other state agencies, the courts, instructors' own websites and the other sources we cite — which are governed by their own policies. The site is directed to a United States audience.

Summary of key points

• Two forms, and you can read the whole site without touching either. The alerts form asks for an email address. The instructor claim form asks for your name, your email and optionally your website. Nothing else on this site collects anything.
• No cookies of ours, no analytics, no trackers. This site sets no cookies of its own, stores nothing in your browser, and runs no analytics, advertising or tracking scripts. Every script we put on a page is our own, written inline, and does one of three jobs: submit a form, copy a badge snippet to your clipboard, or show a link out when the page has been loaded inside somebody else's frame. Our host may add one more, described below, that hides published email addresses from scrapers.
• One minimal database, and only your address. Since 25 July 2026 addresses given to the alerts form are stored in a private subscriber list we operate, so that we can actually send the alerts you asked for. It holds the address, which alert type you chose, and the dates you subscribed and unsubscribed. It does not record which page you signed up from — see below.
• Never sold or shared. We do not sell, rent, trade or otherwise disclose your information to anyone, and we have no advertising or referral partners.
• We do not know what you read. We keep no record associating any person with any page on this site. Given the subject matter, that is deliberate, and it is not going to change.
• Other people's data. The class finder republishes a public state roster of firearms instructors — names, counties and websites. Roster email addresses are never published here, and there is a 72-hour correction and removal channel. Its own section is below.
• Leave whenever you like. Every email carries a one-click unsubscribe link that takes effect immediately. You can also reply "unsubscribe", or email us, and we remove you.

What we collect, and when

The alerts form

Pages on this site carry a form offering an email when Colorado gun laws change. Through it we receive exactly one piece of personal information: the email address you enter. The form also contains a hidden field that is invisible to human visitors and exists solely to catch spam bots; it collects nothing from real people.

When you submit the form, our server stores your address in our own private subscriber list (a database hosted by Cloudflare) and sends two emails through our delivery provider, Resend: a confirmation to you, and a notification to our own inbox. The stored record is deliberately minimal: your address, which of the three alert types you chose, and the dates you subscribed and unsubscribed — and nothing else.

We do not store which page you signed up from. The sibling sites that share this database do record that; this one does not, because it would create exactly the person-to-page record we promise above not to keep. To be complete about it: the notification email that lands in our own inbox does name the page the form was submitted from, because it arrives with the request. That is one message in a mailbox, not a row in a list, it is deleted when a deletion request is honored, and nothing durable ever joins your address to your reading.

Until 25 July 2026 this page said the form wrote to no database, and that was true — the "list" was our inbox. We changed it because a list you cannot reliably send to is not a list, and we had promised to alert you when the law changes. Your address is still never sold, rented or shared.

Please do not send us sensitive personal information. The form asks for an email address and nothing else. In particular, do not email us details of pending criminal matters — we are not your lawyers, nothing you send us is privileged, and the disclaimer explains why you should be talking to a defense attorney instead.

The instructor claim form

The claim page lets a firearms instructor who already appears on Colorado Parks & Wildlife's published roster claim their entry in our class finder. It collects, all typed by you:

• Your name, as it appears on the state roster.
• Your email address — the one the state has on file for you. This is how a claim is authenticated: your address is hashed with SHA-256 and the hash is compared against the roster hashes shipped with the site. The address itself is never published, and no roster address is stored in the deployed site at all — only one-way hashes are, which cannot be turned back into addresses.
• Your website, optionally. The whole point of submitting it is publication: if you give us one, it is added as the link on your entry at the next roster refresh. Do not put anything in that field you do not want on a public page.
• A newsletter checkbox, unticked by default. Claiming is not consent to be mailed. If you do tick it, your address goes into the same subscriber list described above, tagged instructor so this audience can be written to separately, and every message carries a one-click unsubscribe link.
• A honeypot field, as on the other form, which collects nothing from real people.

A successful claim sends you a confirmation email with your badge code, and sends us a notification with your name, address, county, the website you submitted and whether you ticked the box. A claim never edits the site by itself: a person applies it at the next weekly refresh. If the claim does not match the roster, we are told nothing new and neither are you — the form returns the same message whether the name is unknown or the address does not match, so that it cannot be used to test whether somebody is on the state's list.

Email you send us directly

If you email us — a correction, a question, a removal request — we receive whatever you put in that message, and we keep it in our inbox so we can reply and, for corrections, keep a record of why a page changed.

Information handled automatically by our host

This site is hosted on Cloudflare Pages. Like any web host, Cloudflare processes technical information needed to deliver and protect the site, including your IP address, browser user agent and the pages requested, and it may set a strictly necessary security cookie at the network layer to distinguish visitors from bots. That happens at the platform level: we do not receive analytics, dashboards or visitor reports from it, and we do not use it to identify you. See Cloudflare's privacy policy.

Cloudflare also offers an email-obfuscation feature that hides published addresses from scrapers by rewriting them into a form that needs JavaScript. We have opted the contact addresses on this page and the terms page out of it, so that the address you need in order to reach us about your own data is plainly readable, with or without JavaScript.

The Bing verification tag

Every page carries a Bing Webmaster Tools site-verification meta tag. It is a static token proving we control the domain. It sets no cookie, runs no script, and reports nothing about you. Search Console tools tell us which search queries lead to the site in aggregate; they do not tell us who you are.

Other people's data: the state instructor roster

Colorado Parks & Wildlife publishes the list of firearms instructors verified by county sheriffs under C.R.S. § 18-12-116(5)(a). It is public information, published by the state, and we reorganize it by county so that somebody looking for a class can find one. To be exact about who did what: a county sheriff verified the instructor, CPW published it, and we sorted the list. We add no vetting, no ranking and no endorsement of our own.

• What we republish: name, county, and website. That is the entire published record for each person.
• What we never republish: email addresses. CPW's own spreadsheet carries them; our pages do not, anywhere, and neither does the site's code. The deployed claim checker holds one-way SHA-256 hashes and nothing else, and an automated check we run before every release (npm run check:claim) fails if a single roster address appears in the claim module or in the site's published data. We keep the state's file, addresses included, in our own private working files so that claims can be checked and so instructors can be told they are listed. It is never sold, shared or published.
• Outreach is one-time per campaign. We wrote to instructors on the roster to tell them they are listed and how to correct or remove their entry. Those messages are individually addressed personal notes: plain text, no tracking pixels, no attachments, sent once per campaign rather than as a running mailing list, and they reply to corrections@gunlawscolorado.com. Receiving one does not put you on any list — there is nothing to unsubscribe from — and one reply asking us not to write again ends it permanently, whether or not you also want the listing removed.
• Correction and removal: 72 hours, no reason needed. Email corrections@gunlawscolorado.com to fix a detail or to be taken off the site entirely, and it is handled within 72 hours. No form, no account, no explanation required. The entry is taken down, and the request goes onto a suppression list that our publishing tools check automatically at every weekly refresh — so if the state's next file still carries you, the removal is re-applied by the machinery itself, not by somebody remembering. The list stores a one-way cryptographic hash of the address, not the address.

If you are an instructor, the claim page explains the whole arrangement, including the badge, in plain terms.

What we do not do

• No analytics. No Google Analytics, no Plausible, no Fathom, no server-side visitor tracking of our own.
• No advertising. No ad networks, no retargeting pixels, no affiliate tracking. The site carries no advertisements at all.
• No browser storage. We set no cookies, and we store nothing in localStorage or sessionStorage.
• No third-party scripts. No fonts, tag managers, chat widgets, embeds or libraries are loaded from anyone else's server. The only script we do not write ourselves is our host's email-address obfuscation, which it serves from this domain and which reports nothing about you.
• No accounts, no logins, no profiles.
• No payments. Nothing on this site is for sale, so we never see payment details.
• No data brokers. We buy no personal data and we enrich nothing.

How we use what we receive

Your email address is used for the thing you asked for and nothing else: to send you a short email when a Colorado gun law passes, takes effect, or is blocked in court, and — if you claimed a listing — to confirm the claim and send you your badge code. If we ever want to use it for something else, we will ask first.

Who processes data on our behalf

• Cloudflare — hosting, network security, and the D1 database holding the subscriber list. Sees technical request data as described above. Policy.
• Resend — sends the confirmation, claim and notification emails. Sees your email address and the message content. Policy.

Both act as service providers on our behalf. Beyond them, we disclose personal information only if legally required to — a valid subpoena, court order or other lawful demand — and we would rather tell you first where we are permitted to.

Do we sell or share personal data?

No. We do not sell personal data, we do not share it for cross-context behavioral advertising, and we do not run advertising. If that ever changed, we would say so on this page before it happened and give you a way to opt out.

How long we keep it

We keep your address until you ask us to delete it or unsubscribe. Sign-up, claim and correction emails stay in our inbox, and Resend retains delivery logs under its own retention schedule. When you ask for deletion, we remove your address from our list and delete the notification email. Roster entries are refreshed weekly from CPW's published file; a removal request goes onto a suppression list (a one-way hash, not the address) that the refresh checks automatically, so the state's next file cannot bring the entry back.

Your choices and rights

• Unsubscribe with the one-click link in any email we send, or by replying "unsubscribe".
• Ask what we hold about you, and we will tell you — realistically, one email address, a claim record if you made one, and any messages you have sent us.
• Ask us to correct or delete it, and we will. For a roster listing, that includes taking the entry down entirely.

Email corrections@gunlawscolorado.com for any of these. We honor these requests for everyone who asks, whatever state or country you live in, and we will not charge you or make you create an account to exercise them.

Where we stand under the Colorado Privacy Act. The Act applies to businesses above defined thresholds — broadly, those controlling or processing the personal data of at least 100,000 Colorado consumers in a year, or at least 25,000 while deriving revenue from selling personal data. A site collecting voluntarily-typed email addresses and a few hundred names from a public state roster, and selling none of it, is nowhere near either threshold, so the Act does not currently impose obligations on us. We honor access, correction and deletion requests anyway. See the Colorado Attorney General's Colorado Privacy Act resources.

Marketing email, and the postal address on it

United States law governing commercial email requires that every message include a working unsubscribe mechanism and a valid physical postal address for the sender. Both are in the list mail we send. Every alert, every sign-up confirmation and every claim confirmation carries a one-click unsubscribe link that takes effect immediately, and carries our postal address:

Colorado Gun Laws, PO Box 203, Larkspur, CO 80118

The one-time notes we send to instructors on the state roster are a different thing: individually addressed messages telling a person their public information is published here, with no mailing list behind them. They still carry the postal address above and a plain line saying that a reply stops any future note. Reply and we stop — the request goes onto the same suppression list our sending tool checks before every send — or reply and we take the listing down: 72 hours.

Write to us at that address if you prefer paper. Email is faster: corrections@gunlawscolorado.com.

Until 7 August 2026 this section said we did not publish a postal address and would add one before sending at scale. The address had in fact been in the footer of the list mail since 31 July, so the page was simply out of date. It says the address now.

Children

This site is intended for adults, and its subject matter is adult: the terms ask that people using it be 18 or older. It is not directed to children and we do not knowingly collect personal information from anyone under 13. If you believe a child has sent us an address, email us and we will delete it.

Security

The site is served over HTTPS, and the personal data we hold sits in systems operated by established providers. No system is perfectly secure and we cannot guarantee that transmission over the internet is free of risk. The best protection here is structural: we collect almost nothing, we publish less, and roster addresses never reach the deployed site in a readable form at all.

Changes to this policy

If we change what we collect or what we do with it, we will update this page and change the effective date at the top, in the same release as the change itself. Material changes affecting people already on the list will be sent by email. What changed on 7 August 2026: the claim form is now described field by field (it shipped on 3 August and this page had not caught up), the state roster got its own section, the postal address is published, and the two forms now tell you at the point of submission that you are agreeing to these pages. Later the same day, the one-time instructor notes gained the postal address and an opt-out line in their footer, and removal and never-email requests moved from a kept-by-hand step to a suppression list our tools check automatically at every roster refresh and before every send.

Contact

Email corrections@gunlawscolorado.com with any privacy question, or to have your address or listing removed. By post: Colorado Gun Laws, PO Box 203, Larkspur, CO 80118. See also our terms of use, the disclaimer, and about page.