Privacy Policy
Last updated: July 31, 2026
Draft pending legal review.
This describes our actual data practices accurately, but it has not yet been reviewed by a licensed privacy attorney. Several laws referenced below (including Washington’s My Health My Data Act and the CCPA/CPRA) impose specific requirements we may not yet fully satisfy.
Who we are
A Peptide Store (“APS”, “we”) operates apeptidestore.com. We publish educational information about peptides and connect people with third-party suppliers and, on a separate pathway, independent licensed telehealth practices. We are not a pharmacy, a medical provider, or a telehealth company, and we do not sell, ship, or take title to any product.
What we collect
If you browse without an account
You can read the peptide guide, browse suppliers, and view telehealth partners without signing in. In that case we store two cookies on your device: one recording that you completed the age/terms acknowledgment (aps_compliance_ack, one year), and one recording your language preference (aps_locale, one year). Neither identifies you.
If you create an account
Authentication is handled by Clerk. We store your email address, your name, and an identifier linking your account to Clerk. Your password is never stored by us or visible to us.
If you request a supplier match
We record the name and email you enter, the category and compound you asked about, any quantity you indicate, and which supplier the request was directed to.
Health-related information
Two features can collect information about your health, and both are entirely optional:
- Biomarker tracking. If you choose to log lab results, we store the biomarker, the numeric value, and the date you recorded it.
- The AI assistant. We store your conversations so you can return to them. If you type health details into a message, those details are stored in that message.
We are not a HIPAA covered entity, so this information is not protected health information under HIPAA. It may still be “consumer health data” under state laws including Washington’s My Health My Data Act and Nevada SB 370, and “sensitive personal information” under the CCPA/CPRA. We do not sell it, and we do not use it for advertising.
The telehealth pathway is separate: when you continue to a partner practice, you leave our site and provide your information directly to them, under their privacy policy. We do not receive your intake answers, your medical history, or any clinical decision.
Automatically collected
Our host, Vercel, collects aggregate analytics about page views and performance. Server logs may include IP addresses and browser information for security and debugging.
Who we share it with
We do not sell your personal information. We share it only with service providers who process it on our behalf:
- Clerk — authentication and account management.
- Neon — the database where the above is stored.
- Vercel — hosting and analytics.
- Anthropic — powers the AI assistant. The content of your assistant messages is sent to Anthropic to generate a reply.
When you submit a supplier request, the name, email, and request details you provided are shared with that supplier so they can respond to you. This is the purpose of the feature, and the supplier’s own privacy practices govern what they do with it.
When you click through to a telehealth partner, we pass no personal information. We may receive a fee for the referral; where that is the case we say so on the page before you leave.
We also query PubMed (operated by the U.S. National Library of Medicine) to retrieve research citations. Those requests contain the compound being searched, not information about you.
Your choices
- You can delete individual biomarker readings and assistant conversations from within your account.
- You can request deletion of your account and associated data by contacting us.
- You can request a copy of the data we hold about you.
- You can clear the cookies described above through your browser at any time.
Depending on where you live, you may have additional rights under the CCPA/CPRA, the GDPR, or state consumer-health-data laws, including the right to correct, delete, or restrict processing, and to appeal a refusal. We honor these requests regardless of whether a given law applies to us.
Children
This site is not intended for anyone under 18. We ask every visitor to confirm their age before browsing, and we do not knowingly collect information from minors.
Changes and contact
If we change how we handle your data, we will update this page and the date at the top. For any privacy question or request, contact us at legal@apeptidestore.com (placeholder inbox — confirm this is monitored before launch).
See also our Disclaimer & Terms.