What we keep, and why.

Our analytics count public page views, successful code-copy actions by vendor, and outbound vendor clicks. New records contain normalized page paths or vendor and compound identifiers, not search queries, copied code text, referring URLs, or browser user-agent strings. We do not store names, emails, or IP addresses in these analytics records or set tracking cookies. Known bots, admin sessions, and requests with Do Not Track or Global Privacy Control signals are excluded. Older records may still contain referring URLs and user-agent strings collected under our previous implementation.

If you sign up for price alerts, we store the email address you enter, the page it was entered on, and the time. We do not store your name, IP address, or browser details with it. We use the address only to send PeptideSpend catalog updates such as recorded price drops, restocks, and vendor codes, and we do not sell or share the list. Every message includes a one-click unsubscribe link, and you can also ask to be removed by emailing peptidespend@gmail.com.

If you create an account, we store your email address, a hashed version of your password, the time you signed up and last signed in, and the list of peptides you save. Nothing else. The account exists so your saved list follows you across devices. You can change your password or delete the account from the account page at any time; deleting it removes the saved list immediately. Saved and recently viewed peptides for people without an account stay in the browser and are never sent to us.

This data shows which pages, vendors, compounds, and codes visitors use. It also lets us report click counts to vendor partners.

This site sets a session cookie when you sign in to an account, and a separate one for our private admin dashboard. Neither is used to track visitors, and no cookie is set for anyone browsing without signing in.

Outbound vendor links take you to that vendor's own site. The vendor controls its own privacy practices. Vercel hosts PeptideSpend, and Supabase runs the database.

PeptideSpend does not have an automated retention or deletion schedule for page-view and click records yet.

This site is not directed at, and is not intended for use by, anyone under 18.

If this policy changes, we'll update this page. Continued use of the site after a change means you accept the update.

Questions about this policy? Email peptidespend@gmail.com.