OnPeptides.com
Research Grade
 Back to Shop
Privacy

Privacy Policy

How OnPeptides.com collects, uses, stores, and protects your information.

Last updated: June 2025

OnPeptides.com respects the privacy of every researcher we work with. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and the choices you have. If you have any questions after reading this, email us at support@onpeptides.com.

1. Data we collect

We collect only the minimum information needed to fulfil your order and support you:

  • Account information — when you sign in with Google via Emergent Auth we receive your name, email address, and profile picture URL. We do not receive your Google password.
  • Order information — products, quantities, and payment method for every order.
  • Shipping information — the shipping name, street address, city, ZIP, and country you provide at checkout.
  • Payment reference data — transaction hash, Zelle / Cash App confirmation number, or screenshot filename you optionally paste after placing a manual/crypto order.
  • Technical logs — standard web server logs (IP address, user agent, timestamps, path) for security and abuse prevention.

We do not collect Social Security numbers, government IDs, or health information.

2. How we use your data

  • Fulfilling and shipping your order.
  • Providing customer support and responding to your inquiries.
  • Preventing fraud, abuse, and unauthorised access.
  • Complying with our legal obligations, including record-keeping for tax and regulatory purposes.
  • Improving the site’s reliability and performance.

We never sell your data. We do not run advertising trackers on the site.

3. Cookies and local storage

We use a small number of strictly-necessary cookies and browser storage entries:

  • emergent_session_token — a secure, httpOnly cookie that keeps you signed in for up to 7 days.
  • A short-lived value stashed on window.__emergentSessionId__ during the Google sign-in return trip, cleared immediately after the exchange completes.

We do not use third-party advertising cookies or cross-site trackers.

4. Sharing your data

We share your personal data only with the service providers that make OnPeptides.com possible, and only to the extent necessary:

  • Shipping carriers (name and address) so they can deliver your package.
  • Payment processors (order amount and reference) if you pay by card. Card details are handled by our processor, not stored on our servers.
  • Emergent Auth (email/name/picture) as our authentication provider.
  • Cloud hosting and database providers that store our infrastructure.

We may disclose data to a competent authority if legally compelled, and only the specific data required by the request.

5. Data retention

Order and shipping records are retained for up to 7 years to satisfy tax, accounting, and record-keeping obligations. Session tokens are automatically deleted 7 days after issuance. You may request deletion of your account data at any time (see Section 7).

6. Security

We take security seriously:

  • All traffic to and from the site is served over HTTPS with HSTS enabled.
  • Session cookies are marked httpOnly, secure, and sameSite=none.
  • Every checkout is server-side validated — the total is recomputed from validated line items so it cannot be tampered with client-side.
  • Sensitive endpoints are rate-limited.
  • Only vetted personnel have access to the production database, and access is logged.

No system is 100% secure. In the unlikely event of a data breach we will notify affected researchers within 72 hours.

7. Your rights

You have the right to:

  • Request a copy of the personal data we hold about you.
  • Ask us to correct inaccurate personal data.
  • Request deletion of your account and associated data (subject to legal retention obligations for order records).
  • Opt out of any non-essential communications.

To exercise any of these rights email support@onpeptides.com. We will respond within 30 days.

8. Children

OnPeptides.com is intended for adult researchers only. We do not knowingly collect personal data from anyone under 21 years of age.

9. International transfers

Our infrastructure is hosted in the United States. If you visit or order from outside the US, your data is transferred to and processed in the US.

10. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will reflect the latest revision.

11. Contact

Privacy questions? Email support@onpeptides.com or Telegram @onpeptides.