Privacy
Last updated 9 October 2026
1crew is run by cques LLC, a Florida company. It keeps a record of the firearms you tell it about and the scores you shoot. This page says exactly what that record contains, who can read it, which companies touch it, how long each part is kept, and what happens when you leave. Where the answer is uncomfortable, it is written down anyway.
What is stored
- Your account. An email address, and the date you confirmed you were 18 or older. No password, because signing in is a link sent to that address. No phone number.
- Your profile. A handle, optionally a display name, and optionally how long you have been shooting, your dominant hand and eye, and how you rate yourself.
- Your armory. For each firearm: make, model, type, calibre, barrel length, action type, capacity and a nickname if you give one, and, if you add them, what you paid, when, and where it came from in your own words. We never hold a serial number. The database physically has no column for one and a check in the schema fails the build if anybody adds it. If you type a serial number or other private details into a gun's Records, they are kept on that phone only and never sent to us; signing out of the phone removes them unless you saved them to a file.
- Your builds and wishlist. The parts on each firearm (brand, model, where it sits, and a cost or install date if you add them), and a wishlist of firearms and parts with your own target prices. Both are yours alone: sharing a firearm does not share its build.
- Your gear, maintenance and ammunition. Gear that is not on a firearm (a holster, a safe, a case), with what you paid if you add it; each firearm's maintenance record (cleanings, parts replaced, malfunctions, gunsmith visits) and its service schedule; and the ammunition you stock, with what you bought, what you fired and what it cost. All of it is yours alone.
- Your shooting. Sessions with a start and end time, which firearms you used and how many rounds, scores, where each shot landed on the target, split times, and any notes you type.
- Photographs, if you post one. A picture attached to a crew feed post. Location and camera data are stripped out on our server before the image is stored, not in your browser.
- A firearm's photo, if you keep a copy on your account. Your own photo of a firearm stays on your phone. Only if you choose “Keep a copy on your account” for that firearm is it sent to us, so your other phones can show it, together with where you marked your parts on it (a point on the picture for each part, nothing more). Location and camera data are stripped out on our server before it is stored, and nobody but you is ever shown it, whoever you share the firearm with. A 3D scan of your gun, if you add one, is kept on your phone only, with the parts you mark on it, and is never sent to us. The extra photos you keep in a gun's Records stay on your phone the same way.
- Your crew. Which crews you are in and your role, feed posts, comments and reactions, range days and your RSVPs, and the ranges you add.
- Bookkeeping. Which of your devices has synced and when, so the app can work with no signal and catch up afterwards.
No location permission is ever requested. No advertising or analytics code runs in this app at all.
Who can see it
- Your armory is yours alone. Being in a crew with somebody does not let them see what you own. Nobody sees a firearm of yours unless you explicitly share it, and that is enforced by the database rather than by the screens. You can pick one gun or one piece of gear at a time to show your friends; they then see its name and calibre, never what you paid, its value, its photos or its records. Your whole armory can never be shared.
- Your sessions and scores are visible to your crew. That is the point of a crew, and it is what a leaderboard is made of.
- A session you share is visible to anyone with its link. Only when you tap Share: the link opens a page with the day, the range, your rounds, your scores and your target, under your name. Never a firearm. Turn the link off from Home and the page shows nothing from then on.
- A crew's counter card counts scans, not people. Each scan is stored as a time and nothing else: not who scanned it, and not their phone.
- Your profile is a setting you control: private, visible to your crews, or visible to anyone signed in to 1crew. It starts private. “Anyone signed in” means every account on the platform, not only people you know.
- Photographs go to your crew, through links that expire after sixty seconds. The storage they live in is private and has no public URL.
- The operator can read everything. Running the database means holding a key that bypasses every one of the rules above. That is true of every product of this kind and it is worth saying rather than implying otherwise.
Which companies touch it
- Supabase: the database and the photograph storage. This is where your data actually lives.
- Vercel: runs the app. Its request logs include IP addresses, as any web host’s do.
- Resend: sends the sign-in emails. It handles your address to deliver them.
- Upstash: counts requests, so that nobody can be mailbombed or can guess their way in. Your address is hashed before it is used as a counter, so Upstash holds no readable addresses.
- GitHub: holds the nightly backups. They are encrypted before they are uploaded, and the tables holding live sign-in tokens are excluded from them.
- Stripe: takes the payment if you buy a paid display theme. It receives your email address and the billing address you type on its page, and we keep only that you bought the theme and Stripe’s reference for that payment. We never see your card. Nothing goes to Stripe unless you start a purchase.
- Anthropic: reads a photo of a firearm when you ask the armory to scan it for parts. You say yes each time; location and camera data are stripped out before the photo is sent, and we do not keep it. Anthropic deletes the image once it has been read and does not train on it. Nothing goes to Anthropic unless you start a scan.
How long it is kept
- Photographs: 90 days from upload. A photograph you withdraw, or one belonging to an account being deleted, is kept for a further 30 days and then the file itself is destroyed.
- Your account, after you delete it: your profile is scrubbed immediately, and 30 days later your armory is destroyed and your login is removed.
- The audit trail is permanent. Every write to the database is recorded with a copy of the row, so a change can always be explained. No account can read it, including through your data export, and the operator cannot delete from it. It therefore contains a copy of firearm records that outlives the records themselves. This is the least comfortable sentence on this page and it is here because it is true.
- Everything else is kept while the product exists: sessions, scores, feed posts, notifications, sync bookkeeping.
What deleting your account does, and what it does not
It removes: your handle and name, everything you told us about yourself, your crew memberships, the notes you wrote on your own sessions and range day replies, and after 30 days your armory and your login. Your feed comments are replaced with a marker so that conversations other people were part of still read.
It does not remove: your scores and sessions, which stay on finished seasons under an unnamed label so that a season somebody already won still adds up; the notes attached to individual scores, which cannot be edited once written; your crew feed posts, which are part of your crew’s record of its own afternoons; or the audit trail described above.
Deletion is immediate and cannot be undone. There is no way back in through the same email address afterwards.
It cannot reach other people’s phones. 1crew works with no signal by keeping a copy on the device. If a crew mate has already synced, their copy of what they could see is on their phone, and leaving a crew does not reach across and delete it. Signing out or deleting your account does erase your own copy from the device you do it on.
Getting a copy
Everything held about you can be downloaded as a file, at any time, from the You screen in the app. It lists what it deliberately does not contain and why.
Cookies
One cookie, which is what keeps you signed in. It cannot be read by page scripts. There is no advertising, no analytics and no third-party script, so there is nothing to consent to and no banner asking you to.
Age
1crew is for adults. You confirm you are 18 or older when you sign in, and the date you did is recorded on your account.
Do Not Track
We do not track you across other websites, and no third party collects information about you across sites through 1crew. There is nothing for a browser Do Not Track or Global Privacy Control signal to opt you out of, so we do not change how the app behaves in response to one. Fonts and scripts are served from our own servers.
Asking us something
Questions about any of this, including a request to see or delete what is held about you, go to support@cques.ai.