Privacy Policy

Who Runs This Site

Peptide Source Review is an independent editorial review site for US research-peptide vendors. The site is operated by a single editor and is reachable at peptidesourcereview@gmail.com. We do not sell peptides and we do not represent any vendor. We may accept paid sponsorship or affiliate commission from vendors in the future; if we do, it will be disclosed on the Why Trust Us page and will not change any vendor's rating, ranking, or gate status.

What We Collect

We collect the minimum information needed to keep the site running and to respond when you contact us. Specifically:

• What you put in a submission form. If you use the Submit page, you provide some combination of your email address, a vendor name, a vendor website, your relationship to the vendor, and a free-text message. The "anonymous website suggestion" form does not require an email.
• Request metadata. When you submit a form, we record the IP address the request came from, your browser's User-Agent string, and a timestamp. This goes into the same notification email we receive so we can recognize abuse patterns.
• Your email, if you sign up for updates. The sign-up boxes for deals and site updates collect only your email address, which is added to our mailing list (if the list is briefly unavailable, the sign-up is emailed to our inbox instead so it is not lost). You can unsubscribe at any time using the link in any email, or by asking us.
• Partner-link clicks. When you click a link to a vendor that is an affiliate partner, it passes through /go/ on this site, which counts the click and sends you on. To avoid counting the same click twice, we keep your IP address together with the vendor's name for 30 minutes, after which it is deleted automatically. The counts we keep (clicks per vendor, per product and per day) contain no personal information, and no cookie is set.
• Standard server logs. Cloudflare (our hosting and edge network) records page-request metadata such as IP address, User-Agent, the URL requested, and timing. We do not export or retain these logs beyond what Cloudflare itself stores.

We do not use third-party analytics, ad networks, tracking pixels, fingerprinting, or any service that builds a profile of you across other sites.

Why We Collect It

• To answer you. If you ask a question or submit a vendor for review, we use your email to reply or follow up.
• To filter spam and abuse. The IP address and User-Agent help us recognize when forms are being abused, when a Turnstile challenge needs review, and when a submission looks like a bot.
• To keep the site available. Cloudflare needs basic request data to route, cache, and serve pages.

Third-Party Services We Use

We use a small number of third-party services to deliver the site. Each of them has its own privacy policy, which we link to below.

• Cloudflare: hosting (Cloudflare Pages), DNS, and edge network. Cloudflare sees every request to this site and may set short-lived security cookies for bot protection. Cloudflare Privacy Policy.
• Cloudflare Turnstile: privacy-respecting CAPTCHA on our submission forms. Turnstile may read browser signals to determine whether you are a bot. It does not load any tracking cookies for advertising purposes. Same Cloudflare policy.
• Resend: email delivery. When a form is submitted, the contents are sent to our inbox through Resend, and email addresses from the update sign-up are stored on our Resend mailing list. Resend Privacy Policy.
• Google Fonts: we load the DM Sans typeface from fonts.googleapis.com and fonts.gstatic.com. Google may receive your IP address as part of the font request. Google Privacy Policy.
• Google's favicon service: we display vendor favicons via www.google.com/s2/favicons. Google may receive your IP address as part of those requests. Same Google policy.

We do not sell your data to anyone, ever.

How Long We Keep It

• Form submissions are delivered to our inbox and live there as long as the editor's email account retains them. If you ask us to delete a specific submission, we will.
• Mailing-list addresses are kept until you unsubscribe or ask us to remove you.
• Partner-link click records: the IP address used to avoid double-counting is deleted automatically after 30 minutes; the anonymous click counts are kept.
• Server-level request logs are retained by Cloudflare per their policy. We do not separately retain them.

Cookies and Local Storage

We do not set any first-party cookies and we do not use local storage to track you across visits. The only cookies that may be set are short-lived security cookies issued by Cloudflare or Turnstile to recognize and block automated abuse. These are not used for advertising and not used to identify you across other sites.

Your Rights

You can ask us to:

• Show you what we have about you (which will usually be only the contents of forms you submitted).
• Correct anything that is wrong.
• Delete a submission you sent us.
• Withdraw consent for further contact.

Send any of these requests to peptidesourcereview@gmail.com and include enough information for us to find your submission (typically the email address you used and the approximate date). We try to respond within 7 days.

If you are in the EEA, UK, or California and want to exercise a statutory right under GDPR, UK GDPR, or the CCPA/CPRA, the same email is the right place to start.

State Privacy Rights (US Residents)

If you are a resident of California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), Oregon (OCPA), Delaware (DPDPA), Iowa (ICDPA), Indiana (ICDPA), Tennessee (TIPA), Montana (MCDPA), New Hampshire, New Jersey, or any other US state with comparable privacy legislation, you have the following rights regarding the limited personal information we hold about you:

• Right to know what categories of personal information we collect, the sources, and the purpose.
• Right to access a copy of the personal information we have about you.
• Right to delete personal information you have provided.
• Right to correct inaccurate personal information.
• Right to opt out of the sale or sharing of personal information for cross-context behavioral advertising.
• Right to non-discrimination for exercising any of the above.

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We do not use any data to train, build, or fine-tune machine learning models. The information we hold about a typical visitor is limited to the contents of forms you submitted to us (if any) and standard server logs retained for a short period.

To exercise any of these rights, email peptidesourcereview@gmail.com with the email address you used and a brief description of the request. We respond within 45 days as required by most state statutes. If we cannot verify your identity or locate any personal information matching your request, we will tell you in writing.

California residents may also designate an authorized agent to make a request on their behalf. The agent must provide written authorization signed by you.

Children

This site is not intended for anyone under 18. We do not knowingly collect information from minors. If you believe a minor has submitted information to us, contact us and we will delete it.

International Users

The site is operated from the United States and the underlying infrastructure (Cloudflare Pages, Resend) routes data globally. If you use the site from outside the US, you are doing so under that understanding.

Changes to This Policy

If we change this policy, the "Last updated" date at the top of the page will change too. Material changes will also be noted briefly at the top of this section.