What we store, and why.

Email, a hashed password and date of birth. The date is stored because we sell to adults only and verify it at signup and at sale. Anything else about you is optional — see About you.

Vials, dose logs, notes, reminders and bloodwork you enter. Visible only to your account; row-level security enforces it.

If you choose to answer the optional questionnaire after signup: a preferred name, height, weight, sex, the topics you are interested in, your experience with peptides, any health information you type in (conditions, medications), and whether you skipped it. Every question is optional and skipping costs nothing. We use the answers only to tailor what the app shows you — which library shelves come first, how much is explained. They are never used for advertising, never sold or shared with a third party, and never turned into medical or dosing advice.

Your answers are stored with your account in our database, hosted by Supabase in the United States (Virginia). Row-level security limits every read and write to your own account. Nobody at Peptide Cortex looks at them to run the service; access to the database is limited to the people who operate it, and is used only to fix a problem you report to us or where the law requires it.

View, change or delete your answers at any time from the bench (“About you”). Delete removes them from the live database at once; copies in routine daily database backups expire within seven days. Deleting your account deletes them too. We keep them otherwise only for as long as your account exists.

Optional. If you choose to sync reminders to your calendar, we create a private link unique to you. Your calendar app (Apple, Google, Microsoft or another) fetches it on its own schedule and stores what it contains: the names of the peptides you set reminders for, their days and times, and any note you added — no amounts we chose, nothing else from your account. Anyone who has the link can read it, so keep it private; reset it from the bench at any time and the old link stops showing anything. What your calendar provider does with it is governed by their privacy policy.

Shipping address, the items and their lot codes, and the payment reference. Lot codes are kept so a batch recall can reach exactly the people who hold it.

We never see card numbers: there are none. Crypto is handled by a hosted checkout; Zelle payments arrive in our bank with your memo reference.

None. No third-party trackers, no advertising pixels.

Traffic from the EU is blocked at the edge and no EU personal data is processed. See the EU notice.