How We Handle Your Data

Last updated: October 11, 2026

PeptidePrices LLC operates PeptidePrices and is responsible for the data practices described in this policy.

What we collect

PeptidePrices stores the minimum information required to run the service: your email address and name (if you create an account), your saved peptides, price alerts, protocol logs, and stacks. Price and vendor data is aggregated from publicly listed vendor websites — we do not buy or resell your personal data.

Customer reviews and invitations

When you submit a review, we store your public name, rating, text, optional order date and experience ratings, and an optional private email for confirmation and review management. Your email and uploaded purchase evidence are not published or shared with vendors. Moderators can review private evidence and retain a history of review edits and decisions. Checked purchase files are deleted after 30 days; please redact addresses, payment details, and unrelated purchases before uploading.

Participating vendors may send signed order notifications only for customers who opted in to review invitations. We retain the order reference, email, completion time, invitation consent, and delivery status to send one invitation and at most one reminder through Resend. You can stop invitations through the unsubscribe link. Order contact details are deleted after 90 days. A one-way email hash is retained to honor opt-outs. Invitations do not subscribe you to marketing emails.

Email updates

Newsletter updates require a separate signup and email confirmation. We store your address, signup source, consent date, and confirmation status. Resend delivers confirmation and update emails. Each update includes an unsubscribe link; we retain a suppressed address to honor that choice. Reviews, orders, and individual price alerts do not enroll you in the newsletter.

What we don't collect

We do not sell your data. We do not display third-party advertisements. We do not share individual user data with vendors or data brokers. We use the analytics and measurement services described below.

Cookies

We use essential browser storage to keep you logged in and remember features that you request. These features include saved items, alerts, age confirmation, and your privacy choice. Essential storage works even when you reject analytics.

With permission where required, we use Google Analytics, Microsoft UET, Meta Pixel, TikTok Pixel, the OpenAI Ads Measurement Pixel, and our own analytics service. These services can store identifiers and measure page views, generic affiliate-handoff events, referrals, and performance. Our event code does not add vendor, peptide, medical, account, or other user-specific values to Meta, TikTok, or OpenAI measurement events. We do not load these services before consent for visitors in the EU, EEA, United Kingdom, or Switzerland.

To decide whether consent is required, our server uses the request's IP address for a country-level lookup in a locally hosted geolocation database. We return only the applicable privacy region to the browser. Our application does not write the IP address or country result to its database, and it does not send the IP address to a third-party geolocation API. Our hosting provider can process standard request logs as part of operating the service. If the country cannot be determined, we require consent before analytics can run. This product includes GeoLite2 data created by MaxMind, available from maxmind.com.

Deleting your account

Use the Delete account control in your dashboard to delete your account and associated application data. You can also email support@peptideprices.net for help.

Third-party links

Vendor links on this site are direct links to third-party websites. PeptidePrices does not control those sites and is not responsible for their privacy practices. Some outbound links may include affiliate tracking — we disclose affiliate relationships in our How It Works page.

Analytics and chat logging

We log on-site interactions (pages viewed, links clicked, vendors visited) and AI chatbot conversations to understand how you use PeptidePrices and improve the service. This includes recording which peptides and research topics are searched, and — when enabled — the conversation text itself. Contact details (email addresses, phone numbers) are automatically removed before storage.

Certificate verification, API, and AI integrations

When you submit a public certificate URL, PeptidePrices fetches that URL to read the certificate and check supported public laboratory records. When you upload a PDF or image, the application keeps an unguessable preview in server memory for up to 15 minutes and does not add that upload to the public COA library. PeptidePrices does not log the submitted file contents in its application database. Our hosting provider can process standard request logs as part of operating the service. The backend runs on Render in Oregon, United States. Scanned certificates may be sent to OCR.space for text extraction; its published processing locations are France, Germany and Finland, and it deletes document contents after processing.

Developer API keys are stored as one-way hashes. We retain the key label, allowed origins, creation and revocation times, last-used time, and daily request count so you can manage access and we can enforce limits. The public read-only MCP integration receives only the tool parameters needed for the requested certificate search or verification; it does not request a complete chat transcript. MCP requests use extraction, OCR and public laboratory evidence without the website's optional AI analysis. The website checker sends certificate text, or a PDF/image when text cannot be extracted, through OpenRouter to Anthropic Claude Haiku 5.5. That route disables provider fallback and excludes providers that train on submitted data. Anthropic's standard API retention and global processing policies apply; zero retention is not promised. ChatGPT, Codex, Claude, Cursor, and other clients apply their own privacy terms before sending a tool request.

Raw records are retained for up to 90 days, then deleted. You should assume that conversations you submit to the chatbot may be stored and reviewed to improve the service. Please do not enter personal or medical information into the chat.

Your privacy choices

You can accept, reject, or change analytics permission at any time. Rejecting analytics does not block the site. Withdrawing permission stops future analytics and removes analytics identifiers that PeptidePrices can remove from this browser.

Contact

Questions for PeptidePrices LLC? Email us at support@peptideprices.net.