Privacy Policy
Last verified against primary sources: · Updated
The short version: this site collects one thing, an email address, and only if you deliberately type it into the alerts form. We set no cookies of our own, run no analytics, no advertising pixels and no trackers of any kind, and we have no user accounts. We do not sell, rent, trade or share your address with anyone.
Effective July 22, 2026. Questions or deletion requests: [email protected].
Who we are, and what this covers
Colorado Gun Laws (gunlawscolorado.com) is an independent reference site about Colorado firearms law, operated from Denver, Colorado, United States ("we", "us", "our"). It is not a law firm and provides no legal services — see the disclaimer and terms of use.
This Privacy Policy covers the website at gunlawscolorado.com and the single server function that handles the email form. It does not cover the third-party sites we link to — the Colorado General Assembly, the Colorado Bureau of Investigation, other state agencies, the courts and the other sources we cite — which are governed by their own policies. The site is directed to a United States audience.
Summary of key points
- One field, freely given. The only personal information we receive is an email address you type into the alerts form yourself. No name, no address, no phone number, no account.
- No cookies of ours, no analytics, no trackers. This site sets no cookies of its own, stores nothing in your browser, and runs no analytics, advertising or tracking scripts. The only JavaScript we include is the few lines that submit the email form; our host, Cloudflare, may additionally serve a small script that reveals email addresses to real visitors while hiding them from automated scrapers. Pages also carry inert JSON-LD structured-data blocks, which execute nothing.
- No database. Your address is not written to any database we operate. It exists as an email in our inbox and in our email provider's delivery logs.
- Never sold or shared. We do not sell, rent, trade or otherwise disclose your address to anyone, and we have no advertising or referral partners.
- We do not know what you read. We keep no record associating any person with any page on this site. Given the subject matter, that is deliberate.
- Leave whenever you like. Reply "unsubscribe" to any email, or email us, and we remove you.
What we collect, and when
The alerts form
Pages on this site carry a form offering an email when Colorado gun laws change. Through it we receive exactly one piece of personal information: the email address you enter. The form also contains a hidden field that is invisible to human visitors and exists solely to catch spam bots; it collects nothing from real people.
When you submit the form, our server sends two emails through our delivery provider, Resend: a confirmation to you, and a notification to our own inbox containing your address. The form writes to no database. Our record of your sign-up is that notification email, plus the delivery logs Resend keeps as our provider.
Please do not send us sensitive personal information. The form asks for an email address and nothing else. In particular, do not email us details of pending criminal matters — we are not your lawyers, nothing you send us is privileged, and the disclaimer explains why you should be talking to a defense attorney instead.
Email you send us directly
If you email us — a correction, a question, a deletion request — we receive whatever you put in that message, and we keep it in our inbox so we can reply and, for corrections, keep a record of why a page changed.
Information handled automatically by our host
This site is hosted on Cloudflare Pages. Like any web host, Cloudflare processes technical information needed to deliver and protect the site, including your IP address, browser user agent and the pages requested, and it may set a strictly necessary security cookie at the network layer to distinguish visitors from bots. That happens at the platform level: we do not receive analytics, dashboards or visitor reports from it, and we do not use it to identify you. See Cloudflare's privacy policy.
The Bing verification tag
Every page carries a Bing Webmaster Tools site-verification meta tag. It is a static token proving we control the domain. It sets no cookie, runs no script, and reports nothing about you. Search Console tools tell us which search queries lead to the site in aggregate; they do not tell us who you are.
What we do not do
- No analytics. No Google Analytics, no Plausible, no Fathom, no server-side visitor tracking of our own.
- No advertising. No ad networks, no retargeting pixels, no affiliate tracking. The site carries no advertisements at all.
- No browser storage. We set no cookies, and we store nothing in localStorage or sessionStorage.
- No accounts, no logins, no profiles.
- No payments. Nothing on this site is for sale, so we never see payment details.
- No data brokers. We buy no personal data and we enrich nothing.
How we use what we receive
Your email address is used for one thing: to send you a short email when a Colorado gun law passes, takes effect, or is blocked in court. That is the entire purpose, and we will not repurpose it. If we ever want to use it for something else, we will ask first.
Who processes data on our behalf
- Cloudflare — hosting and network security. Sees technical request data as described above. Policy.
- Resend — sends the confirmation and notification emails. Sees your email address and the message content. Policy.
Both act as service providers on our behalf. Beyond them, we disclose personal information only if legally required to — a valid subpoena, court order or other lawful demand — and we would rather tell you first where we are permitted to.
Do we sell or share personal data?
No. We do not sell personal data, we do not share it for cross-context behavioral advertising, and we do not run advertising. If that ever changed, we would say so on this page before it happened and give you a way to opt out.
How long we keep it
We keep your address until you ask us to delete it or unsubscribe. Sign-up and correction emails stay in our inbox, and Resend retains delivery logs under its own retention schedule. When you ask for deletion, we remove your address from our list and delete the notification email.
Your choices and rights
- Unsubscribe by replying "unsubscribe" to any email we send.
- Ask what we hold about you, and we will tell you — realistically, one email address and any messages you have sent us.
- Ask us to correct or delete it, and we will.
Email [email protected] for any of these. We honor these requests for everyone who asks, whatever state or country you live in, and we will not charge you or make you create an account to exercise them.
Where we stand under the Colorado Privacy Act. The Act applies to businesses above defined thresholds — broadly, those controlling or processing the personal data of at least 100,000 Colorado consumers in a year, or at least 25,000 while deriving revenue from selling personal data. A site collecting nothing but voluntarily-typed email addresses and selling none of them is nowhere near either threshold, so the Act does not currently impose obligations on us. We honor access, correction and deletion requests anyway. See the Colorado Attorney General's Colorado Privacy Act resources.
Marketing email, and what we must do before sending any
United States law governing commercial email requires that every message include a working unsubscribe mechanism and a valid physical postal address for the sender. Our emails carry an unsubscribe path. We do not currently publish a postal address, so before we send email at any scale we will include a compliant postal address in every message. We would rather say that plainly here than send mail that falls short of it.
Children
This site is intended for adults. It is not directed to children under 13 and we do not knowingly collect personal information from them. If you believe a child has sent us an address, email us and we will delete it.
Security
The site is served over HTTPS, and the only personal data we hold sits in mail systems operated by established providers. No system is perfectly secure and we cannot guarantee that transmission over the internet is free of risk. The best protection here is structural: we collect almost nothing, so there is almost nothing to lose.
Changes to this policy
If we change what we collect or what we do with it, we will update this page and change the effective date at the top, in the same release as the change itself. Material changes affecting people already on the list will be sent by email.
Contact
Email [email protected] with any privacy question, or to have your address removed. See also our terms of use, the disclaimer, and about page.