SECURITY FIRST
Why Your Data Is Safe
We built The Collective so that even we cannot access your vault. Not as a marketing claim — as an architectural decision.
THE TECHNICAL TRUTH
Your data is encrypted before it leaves your device.
When you add a firearm to Ghost Vault, your serial number is encrypted on your phone or computer using AES-256-GCM — the same standard used by the US military and financial institutions — before it ever reaches our servers.
The encryption key is stored in your device's secure hardware enclave (iOS Keychain or Android Keystore). We never see it. We never touch it. We cannot recover it.
AES-256-GCM · Client-side · Hardware enclave key storage · enc: prefix on all encrypted fields · Zero server-side decryption
HOW IT WORKS
You add a firearm
Serial number entered on your device
Encrypted instantly
AES-256-GCM applied using your device key
Encrypted data sent
Only ciphertext leaves your device — never plaintext
Stored encrypted
Our servers hold encrypted data we cannot read ✓
What We Can — and Cannot — See
WE CANNOT READ
- ✗Your serial numbers
- ✗Your NFA documents
- ✗Trust records and beneficiaries
- ✗Purchase history and prices
- ✗Safe combinations
- ✗Estate planning instructions
- ✗Vault encryption keys
- ✗Your location history
This data is encrypted on your device. Even if compelled by law, we can only produce encrypted ciphertext — not readable data.
WE CAN SEE
- ✓Your username and email
- ✓Your subscription status
- ✓Range session metadata (dates, round counts)
- ✓Community posts you share
- ✓FFL finder search activity
We see only what you choose to share publicly. Your vault data is never part of this.
IF WE ARE COMPELLED BY LAW
We hand over encrypted ciphertext. Nothing more.
If The Collective receives a valid legal demand for your vault data, here is exactly what we produce: encrypted binary data that is mathematically unreadable without your device key.
We do not have your encryption key. We cannot produce readable serial numbers, NFA documents, or vault records — because we genuinely do not have them.
Your device key never leaves your hardware enclave. Legal demands get ciphertext. That's the design.
We are not an FFL. We are not subject to ATF recordkeeping requirements. We are a software tool — and we've designed it so that the most sensitive data never reaches us in readable form.
FOR MAXIMUM SECURITY
Go completely offline.
Ghost Vault is already zero-knowledge. But if you want complete sovereignty — no servers, no cloud, no internet — our desktop download runs entirely offline.
Your data lives only on your machine. AES-256 encrypted with a master password you control. No network connection required. Ever.
- ✓ No internet after download
- ✓ Data never leaves your machine
- ✓ AES-256 local encryption
- ✓ Master password you control
- ✓ Air-gap compatible
- ✓ Mac + Windows
Last sync: Never (offline)
All data encrypted locally
Protecting what comes after you.
Estate planning isn't just about your collection. It's about making sure your family isn't left confused, legally exposed, or missing critical information.
Trusted Contact
Designate someone who receives access when you trigger it — or after inactivity. They get exactly what you want them to have. Nothing more.
Encrypted Safe Combinations
Store safe combinations, key locations, and private notes — encrypted in your vault. Your trusted contact sees them only when you allow it.
NFA Legal Guidance
Auto-generated instructions specific to each item's registration type. Your family won't unknowingly possess NFA items illegally. The guidance explains exactly what to do — and who to call.
Your vault is yours.
We built it that way on purpose.