Privacy Policy | Peptide Price Lab

1. Who we are

Peptide Price Lab ("PPL," "we," "us," or "our") is an independent editorial publication and price-comparison tool operated by CB&CS, LLC, a Texas limited liability company. This Privacy Policy explains what information we collect, how we use it, and the choices you have. It covers our website at peptidepricelab.com, our web application at app.peptidepricelab.com, our Android app on Google Play, and our email newsletter (the "Dispatch") — together, the "Services."

If you have any questions, contact us at editor@peptidepricelab.com.

2. The short version

We are a free, vendor-neutral calculator and editorial site. We make our money from affiliate codes, not from selling your data.
We do not sell or rent your personal information.
The optional Dose Tracker stores health-related information you enter yourself. It is private to your account, stored for us by Supabase, and never sold. Analytics and advertising providers do not receive the values you enter. You can export or delete it at any time. See §7 — it's the most important section if you use that feature.
We use analytics and advertising measurement (Google Analytics, Microsoft Clarity, and the Meta Pixel), plus affiliate-link cookies when you click a vendor link. Account sheets and the My Peptides area are explicitly content-masked from Clarity recordings.

3. Information you provide to us

Account information. If you create an account to use the app, we collect your email address. There is no password: you sign in with a one-time link or code we email to you, or, in the Android app, with your Google account. If you choose Google, Google shares your name, email address, and profile picture link with us, and we use them to create and identify your account. We never receive your Google password.
Profile and app records. We store the display name and avatar you choose, favorites, saved calculations, price watches, notification preferences and history, and records needed to operate those features. If you click through to a vendor while signed in, we record the vendor and time so we can support features such as a verified-visit badge on a review.
Newsletter signup. If you subscribe to the Dispatch, we collect your email address. You can unsubscribe in one click at any time.
Dose Tracker entries (optional, health-related). If you choose to use the Dose Tracker, we store what you enter: compounds, amounts and units, dates, injection sites, notes, optional measurements (such as weight or resting heart rate), inventory, and any schedule you create. This is covered in detail in §7.
Community reviews and feedback. Reviews include the display name, rating, and text you submit. Approved reviews are public. Feedback sent through the app is private to our team and may be delivered to us by email so we can respond or improve the Services.
Communications. If you email us, use the in-app feedback form, or reply to the Dispatch, we keep your message and contact details to respond.

4. Information we collect automatically

When you use the Services, we and our analytics providers may collect:

Device and log data — IP address, browser and device type, operating system, and access times.
Usage data — pages and features viewed, links clicked, and general interaction patterns.
Analytics and advertising measurement — Google Analytics, Microsoft Clarity, and the Meta Pixel may receive page or feature names, clicks, device/browser identifiers, referral information, and general interaction patterns. We do not send the values in your Dose Tracker entries as analytics or advertising event parameters.
Session analytics — Microsoft Clarity may record session activity such as page interactions, scrolling, and heatmaps. Content inside app sheets and the My Peptides area is explicitly masked so its text is not uploaded to Clarity.

5. How we use information

We use the information we collect to:

Provide, operate, and improve the Services;
Create and maintain your account and the Dose Tracker;
Send the Dispatch, optional price alerts and dose reminders you enable, and respond to your messages;
Understand how the site is used so we can make it better;
Maintain security, prevent abuse, and debug problems; and
Comply with legal obligations.

We do not use your Dose Tracker health data for any of the analytics, advertising, or tracking described in §4 and §6.

6. Cookies, analytics, and affiliate links

We use cookies and similar technologies on peptidepricelab.com, on app.peptidepricelab.com, and inside the Android app, which runs the same app:

Functional cookies — needed to keep you signed in and to make the site work. These can't be turned off without breaking core features.
Analytics and measurement cookies — Google Analytics, Microsoft Clarity, and the Meta Pixel help us measure traffic, understand usage, and assess whether our own promotions led people to useful app actions. Clarity may capture session recordings and heatmaps, subject to the content masking described above.
Affiliate-link cookies — when you click a vendor link or use one of our discount codes, the vendor (or its affiliate network) may set a cookie so any resulting purchase is credited to us. These cookies are set by the vendor's site under the vendor's own privacy policy, not ours. Using our codes never costs you more.

You can control cookies through your browser settings, and where required we will offer a cookie banner or opt-out. Blocking analytics cookies will not affect your ability to use the Services. Analytics may record that a feature or screen was opened, but we do not send the health values, notes, or other Dose Tracker contents you enter as analytics or advertising parameters.

7. Dose Tracker & health data

The Dose Tracker is an optional, self-directed logging tool. Any health-related information in it — compounds, amounts, dates, injection sites, notes, and optional measurements such as weight or resting heart rate — is entered by you, about you. We do not obtain it from any healthcare provider, pharmacy, or third party, and we do not treat it as a medical record.

A note on HIPAA. PPL is not a doctor, hospital, insurer, or other "covered entity," so HIPAA does not apply to this data. Please don't assume HIPAA-style protections; instead, the protections that apply are the ones described here.

Consent. Before you use the Dose Tracker for the first time, we record that you consented to its terms, the date and version of that consent, and your confirmation that you are 18 or older. You can withdraw consent at any time by deleting your data and discontinuing use.

How it is stored. Your entries are stored in our cloud database, scoped to your account so no other user can access them, and protected by access controls and encryption at rest. We do not use end-to-end or "zero-knowledge" encryption, and we describe our protections plainly rather than overstating them. Information sent between your device and our servers is protected in transit by HTTPS.

What we do NOT do. We do not sell your health data. We do not share it with advertisers or use it to target advertising. We do not send the values or notes in your Dose Tracker entries to Google Analytics, Microsoft Clarity, or Meta. The app's account sheets and My Peptides area are explicitly content-masked from Clarity session recordings.

Exporting your data. You can export your own entries at any time as a PDF or CSV. If you choose Download, the export is generated in your browser and downloaded directly to your device. If you explicitly choose Email to me, the app sends that generated file through our server and MailerSend to the email address on your account; you cannot name a different recipient. PPL does not keep a separate copy of the exported file after delivery. The export is simply a copy of the information you entered, and PPL does not verify, interpret, or vouch for it.

Optional reminders and alerts. If you enable browser notifications, we store a push-subscription endpoint and send notifications through the push service used by your browser or device. A browser dose reminder may name the compound from your own schedule, but does not include the dose amount. In the Android app, dose reminders are built and scheduled on your phone from your own schedule; they name the compound or compounds due, but not the dose amount, and doses due at the same time share one reminder. Because a reminder can appear on your lock screen, you can turn off "Show peptide names in reminders" in Settings to get a general reminder instead. Price alerts in the Android app are delivered through Google's Firebase Cloud Messaging: when you turn them on, we store a device token linked to your account so we can reach your phone, and the alert itself says only that something on your watchlist dropped. Email price alerts, if you turn them on, may identify the watched peptide or vendor. You can turn these notifications off in Settings or in your device or browser settings. Signing out of the Android app removes its device token from your account.

Deleting your data. You control your entries. You can delete any individual entry, wipe your entire Dose Tracker log from Settings, and deleting your account removes your Dose Tracker data as part of that process.

Breach notification. Because your Dose Tracker data is health-related and stored in our cloud, the FTC's Health Breach Notification Rule may apply. If a qualifying breach of this data occurs, we will notify affected users (and regulators where required) as the law requires.

We do not sell or rent your personal information. We share it only as follows:

Service providers ("sub-processors"). Companies that run the Services on our behalf under confidentiality obligations — for example, our hosting and database/authentication provider (Supabase), Google when you choose to sign in with Google, our analytics providers (Google Analytics, Microsoft Clarity), and our email newsletter platform. They may process data only to provide their service to us.
Delivery and measurement providers. MailerSend processes an export attachment only when you choose Email to me. Browser and device push services, including Google's Firebase Cloud Messaging for the Android app, process opted-in notification delivery using your device token and the notification text. Meta processes app and site measurement events from the Meta Pixel. We do not send these providers the values or notes in your Dose Tracker entries except for the user-requested email attachment described in §7.
Affiliate networks. When you click an affiliate link or use a code, the vendor and its affiliate network process that click under their own policies.
Legal and safety. When required by law, to respond to lawful requests, or to protect our rights, users, or the public.
Business transfer. If PPL is involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction, subject to this Policy.

We never include Dose Tracker health data in advertising or analytics data. Supabase stores it for us, and MailerSend receives a generated export only when you explicitly ask us to email that file to your account address.

9. Third-party vendors and links

PPL is an independent, vendor-neutral publication. We link to peptide vendors, some through affiliate codes. We do not sell peptides, and we do not control those vendors' websites, products, or privacy practices. When you leave our site for a vendor, that vendor's own terms and privacy policy govern. We are not responsible for their content or practices.

10. Data retention

We keep personal information for as long as your account is active or as needed to provide the Services, then delete or anonymize it within a reasonable period, unless a longer period is required by law. You can delete your Dose Tracker data and your account at any time (see §7 and §11). A confirmed Dispatch subscription is a separate email-list consent; use the unsubscribe link in any issue to remove it from the email platform, or ask us to delete both records when contacting us.

11. Your rights and choices

Depending on where you live, you may have the right to:

Access the personal information we hold about you;
Correct inaccurate information;
Delete your information;
Port your information to another service (the Dose Tracker export supports this directly);
Opt out of the newsletter (one-click unsubscribe); and
Restrict or object to certain processing.

California (CCPA/CPRA). To the extent these laws apply to us, California residents have the rights above and the right not to be discriminated against for exercising them. We do not sell or "share" personal information as those terms are defined under California law.

EEA/UK (GDPR). If you are in the European Economic Area or the United Kingdom, our lawful bases for processing are your consent (e.g., the newsletter and the Dose Tracker), the performance of our agreement with you (operating your account), and our legitimate interests (securing and improving the Services). You also have the right to lodge a complaint with your local data-protection authority.

You can delete your app account from Settings → Your data → Delete my data. If you cannot access the app, use our account-deletion resource or email editor@peptidepricelab.com. To exercise any other right, email us. We will respond as required by applicable law.

12. Children's privacy

The Services are intended for adults. We do not knowingly collect personal information from anyone under 18, and the Dose Tracker is restricted to users who confirm they are 18 or older. If you believe a minor has provided us information, contact us and we will delete it.

13. International users

We operate from the United States, and your information is processed and stored there. If you access the Services from outside the U.S., you understand your information will be transferred to and handled in the U.S., where data-protection laws may differ from those in your country.

14. Changes to this Policy

We may update this Policy from time to time. We will post the new version here and update the "Last updated" date. If a change is material, we will provide more prominent notice (such as a banner or email).

15. Contact us

CB&CS, LLC — Peptide Price Lab
PO Box 68, Copperas Cove, TX 76522
Email: editor@peptidepricelab.com