Privacy Policy

The short version

We don't sell peptides, so we never ask for a payment card or a shipping address. We run no analytics, no tracking pixels and no advertising code, so we don't know which pages you read. Most of what this site remembers about you never leaves your browser.

You can use every part of this site — the whole catalog, the dosing calculator, the stack builder, the scheduler and compare — without an account and without giving us anything at all.

1. What stays on your device

The site stores the following in your browser's local storage. If you are not signed in, none of it is ever sent to us, and clearing your browser data deletes all of it permanently:

• That you confirmed you are 18 or older
• Your cookie banner choice
• Your selected goals
• Compounds you have favourited
• Stacks you have saved, and the working set currently loaded in the tools
• Calculator inputs — vial size, reconstitution volume, dose

2. What we store, and only if you choose to give it

If you create an account

• Your email address and a securely hashed password, handled by our authentication provider. We never see your password.
• If you sign in with Google instead: your email, name and profile picture as supplied by Google. We ask for nothing beyond that.
• Your goals, favourites and saved stacks, so they follow you between devices. This is the only reason the account exists.

If you subscribe to the newsletter

• Your email address, which form you used, and the date. Nothing else, and you do not need an account.

3. What we never collect

• Payment card details, billing or shipping addresses — there is nothing to buy
• Analytics, session recording, heatmaps or behavioural profiles
• Advertising or cross-site tracking cookies
• Anything about your health, conditions or medications

We do not sell, rent or share your personal data with advertisers or data brokers. There is no arrangement under which we could.

One honest caveat: our hosting and database providers process IP addresses and standard request logs as any web server must in order to deliver a page and resist abuse. We do not use those logs to build a profile of you, and we have no tool installed that would let us.

4. Cookies

If you sign in, an authentication cookie keeps you signed in. That is the only cookie this site sets. Your age confirmation and cookie banner choice are stored in local storage, not cookies. There are no analytics or advertising cookies to consent to — the banner records your preference so we can honour it if that ever changes.

5. Third parties

• Supabase — authentication and database hosting. It stores your account, preferences and saved stacks.
• Google — only if you choose to sign in with Google, and only to verify who you are.
• Our web host — serves the site and keeps standard server logs.

Each has its own privacy policy governing how it handles data. We do not use Stripe or any payment processor, because we process no payments.

Our where to find quality peptides page links to vendor websites. Those are independent companies we have no financial relationship with. Once you follow a link, you are on their site under their privacy policy, and we receive nothing about what you do there.

6. Your rights

You can ask us at any time to:

• Tell you what personal data we hold about you
• Correct anything inaccurate
• Delete your account and everything attached to it
• Send you a copy of your data in a portable format
• Remove you from the newsletter

Deleting your account removes your saved goals, favourites and stacks along with it, automatically and immediately. Anything held only in your browser is yours to clear at any time, without asking us.

To exercise any of these, email privacy@peptide-concierge-734435622932.us-central1.run.app.

7. How long we keep things

• Account data — until you delete your account
• Newsletter subscription — until you unsubscribe
• Device data — until you clear your browser

8. Security

Data is encrypted in transit (TLS) and at rest. Access to your saved preferences and stacks is enforced at the database level, so one account cannot read another's data even if the application layer were compromised. No system is perfectly secure, and we would rather say so than imply otherwise.

9. Age

This site is not directed at anyone under 18 and we ask you to confirm your age before using it. We do not knowingly collect personal information from minors, and will delete it if we learn we have.

10. Changes

If we change this policy we will update the date at the top. If a change materially affects what we collect or how we use it, we will say so prominently rather than quietly revising this page.

11. Contact

Questions about this policy, or about anything on this site: privacy@peptide-concierge-734435622932.us-central1.run.app.