Privacy Policy

How peptides.site collects, uses, stores, and shares your personal data. Written to comply with the EU General Data Protection Regulation (GDPR), UK GDPR, the ePrivacy Directive, and the California Consumer Privacy Act (CCPA).

1. Who we are

Peptides.site ("we", "us", "the site") is an independent educational resource publishing information about research peptides. If you need to contact us about privacy, data protection, or exercise your rights, email privacy@peptides.site.

2. What data we collect

Category	Data	Source	Purpose
Analytics	IP address (truncated), device, browser, pages visited, referrer	Google Analytics 4 cookie	Understand traffic patterns
Lead magnet	Email address, page requested	You submit it via the download form	Send the requested PDF and occasional related updates
Consent state	Age-gate acceptance, cookie choice	Your browser localStorage	Avoid re-prompting on repeat visits
Server logs	IP, user agent, request path, timestamp	GitHub Pages / Cloudflare edge	Security, abuse prevention

We do not collect financial data, government IDs, health data, or biometric data. We do not knowingly collect data from anyone under 21.

3. Legal basis (GDPR / UK GDPR)

• Analytics cookies: Consent (Art. 6(1)(a)). You choose Accept or Reject in the cookie banner; default is denied.
• Lead magnet email: Consent (Art. 6(1)(a)) and legitimate interest for follow-up in scope of the same request (Art. 6(1)(f)).
• Server logs: Legitimate interest in site security (Art. 6(1)(f)).
• Cookie / age-gate state: Legitimate interest in a functional user experience.

4. Cookies

We use Google Consent Mode v2. Analytics cookies are denied by default. Only after you click "Accept" in the cookie banner do we set them. You can change your choice at any time by clearing browser storage for peptides.site or by using the "Reset consent" link at the bottom of this page.

Cookie	Purpose	Duration	Set by
_ga	Distinguish users	2 years	Google Analytics (only if accepted)
_ga_<id>	Persist session state	2 years	Google Analytics (only if accepted)
localStorage: pep_cookie_consent_v1	Remember your cookie choice	Until cleared	peptides.site
localStorage: pep_gate_v1	Remember age-gate acceptance	Until cleared	peptides.site

5. Who we share it with

• Google (Ireland) Ltd. — Google Analytics 4 processor. Data may be transferred to the US under the EU-US Data Privacy Framework.
• GitHub, Inc. — hosting (GitHub Pages). Standard server logs.
• n8n workflow endpoint (self-hosted, EU) — receives lead-magnet email submissions.

We do not sell personal data. We do not run advertising networks. We do not use personalisation or ad-targeting cookies.

6. International transfers

Google Analytics may process data in the United States under the EU-US Data Privacy Framework and UK Extension. GitHub server logs may be processed in the US under equivalent transfer mechanisms. No other cross-border transfers occur.

7. Retention

• Analytics data: retained per Google Analytics settings (default 14 months).
• Lead magnet email addresses: retained until you unsubscribe or request deletion.
• Server logs: rotated per host provider policy, typically 30 days.
• Local browser storage: until you clear it.

8. Your rights

Under GDPR / UK GDPR you have the right to:

• Access the data we hold about you;
• Correct inaccurate data;
• Erase your data ("right to be forgotten");
• Restrict or object to processing;
• Data portability;
• Withdraw consent at any time;
• Complain to your local data protection authority (in the UK: ICO).

To exercise any right, email privacy@peptides.site. We respond within 30 days.

9. California residents (CCPA)

We do not sell personal information as defined by CCPA. California residents have the right to know, delete, and correct personal information we hold, and to be free from discrimination for exercising these rights. Requests to privacy@peptides.site.

10. Children

This site is restricted to adults 21 and over. We do not knowingly collect data from anyone under 21. If you believe we have, contact us and we will delete the data.

11. Security

The site is served entirely over HTTPS. Local storage is used only for consent state; no personal data is stored client-side. Lead-magnet submissions are transmitted over TLS to a secured n8n endpoint.

12. Changes

We may update this policy. Material changes will be flagged at the top of this page.

13. Reset your consent

Click here to reset your cookie & age-gate consent, then refresh.

Last updated: September 2026.