Privacy Policy

This policy explains what The Peptide Audit collects on thepeptideaudit.com, why, and your choices. We collect as little as possible and we do not sell or share your personal information for advertising.

What we collect

• Account: email, username, and your password stored only as a one-way bcrypt hash (we can't see it).
• Activity you choose to save: favorites, watchlist and price targets, reviews, giveaway entries.
• Proof of purchase (optional): stored privately, viewed only by moderators to verify a review, then deleted.
• Messages you send through the contact form.
• Store orders (when the store opens): name, email and shipping address.
• Basic server logs such as IP address, used for security and rate limiting.

Cookies and local storage

We use only essential cookies: a sign-in cookie, a cart cookie, and an order-receipt cookie. Your browser also remembers that you accepted the age notice and dismissed pop-ups. We don't use advertising or cross-site tracking cookies.

How we use it

To run your account, show your saved items, send the price and restock alerts you ask for, verify reviews, run giveaways, fulfil orders, respond to you, and protect the Site from abuse.

Who we share it with

Only service providers that help us run the Site — hosting, database and email delivery — under confidentiality obligations, or when required by law. Clicking a vendor link takes you to that vendor's site, which has its own privacy policy.

How long we keep it

Account data is kept until you delete your account. Proof-of-purchase files are deleted after moderation. Order records may be kept as long as tax law requires.

Your choices and rights

• Remove any watchlist alert, or delete your whole account, in Dashboard → Account & security. Deleting your account erases your profile, reviews, favorites, alerts and entries.
• Depending on your state (for example California, Colorado, Virginia), you may have rights to access, correct, delete or port your data. Email support@thepeptideaudit.com and we'll respond within 45 days.

Security

Passwords are hashed, sign-in cookies are signed and HTTP-only, connections use HTTPS, and sign-in attempts are rate-limited. No system is perfectly secure; if we learn of a breach affecting your data we will notify you as required by law.

Children

The Site is for adults 21+. We don't knowingly collect data from anyone younger.

Contact

The Peptide Audit · support@thepeptideaudit.com