Privacy Policy

What Data Is Collected

Anonymous submissions: Compound selection, dosing details, reported effects, and optional bloodwork data. A hashed version of your IP address is stored for rate limiting only. The raw IP address is never stored.

Vendor accounts: Email address, password (encrypted by Supabase Auth), business name, license number, and contact email. Submitted quality data including batch numbers, purity percentages, and certificates of analysis.

User Accounts (Optional)

What is stored: email address, optional display name, compound and stack favorites (slug references only), and calculator presets (vial strength, diluent volume, target dose, syringe type, and optional preset name).

What is NOT stored: no health data, no dosing history, no bloodwork, no labs, no injection logs, no site rotation, and no personal health information of any kind. Peply accounts are for saving preferences only.

Data deletion: visit Account settings and use "Delete account" to permanently remove your account and all associated preferences. This cannot be undone.

Data export: download a JSON file of your preferences from Account settings at any time.

How Data Is Stored

All data is stored in Supabase (PostgreSQL), hosted in the United States. Data is encrypted in transit (TLS) and at rest. Anonymous submissions are stored in a private table with no public read access. Vendor data is accessible only to the vendor who submitted it and to Peply administrators.

Cookies & Tracking Technologies

First-party cookies: Peply uses first-party cookies solely for authentication session management (keeping you signed in). These are strictly necessary cookies and are not used for tracking or advertising.

Analytics: Peply uses Vercel Analytics for anonymous, aggregated usage data such as page views, referrers, and device types. Vercel Analytics does not use cookies and does not collect personally identifiable information.

No third-party tracking: Peply does not use third-party tracking cookies, advertising cookies, or cross-site tracking technologies.

No data sharing for advertising: Peply does not sell, share, or provide personal data to third parties for advertising or marketing purposes.

No consent banner: No cookie consent banner is displayed because Peply only uses strictly necessary first-party cookies and privacy-friendly analytics.

How Data Is Used

Submission data may be used in aggregate to improve compound reference information and identify data quality patterns. Individual submissions are never published. Vendor identities are never disclosed without explicit consent.

What We Do Not Do

• We do not sell or share individual submission data
• We do not track users beyond rate-limit IP hashing
• We do not use third-party analytics or advertising trackers
• We do not correlate anonymous submissions with identities

Cookies and Sessions

Peply uses a theme preference cookie (localStorage) for dark/light mode. Vendor accounts use Supabase Auth session cookies for authentication. No third-party cookies are used. The calculator and compound reference pages function without any cookies.

Data Requests

To request deletion of vendor account data or to inquire about data practices, contact: privacy@peply.bio

Anonymous submissions cannot be traced to individuals and therefore cannot be individually deleted.