Privacy Policy

Account details. When you create an account we store your name, email address, and a hashed version of your password. We never store your password in readable form. If you sign in with a third-party provider, we store the identifiers and tokens that provider returns so we can keep you signed in.

Profile details. Optionally: a display name, a short bio, your stated research goals, an age range, and a country. You can also enable anonymous mode, which hides your identity on community content.

Tracker entries. If you use the protocol tracker, we store what you enter: dates, mood and energy and recovery ratings, hours of sleep, body weight, free-text notes, and any side effects you record. We treat this as sensitive health information. You are never required to enter it, and you can delete entries at any time.

AI assistant conversations. Your messages and the assistant’s replies are stored so you can return to a conversation.

Community content. Posts, comments, and votes, along with the account that created them.

Email signups. If you subscribe to research summaries or a category newsletter, we store the email address you provide.

Session cookies. A cookie that keeps you signed in, and a preference cookie that remembers your chosen language. Both are necessary for the site to function as you would expect.

Aggregate analytics. We use Vercel Web Analytics and Speed Insights to see how many people visit, which pages they read, and how fast pages load. These are privacy-preserving and do not use tracking cookies or build cross-site advertising profiles.

Affiliate clicks. When you click through to a marketplace partner, we record that the click happened and which partner and peptide it related to, so we can measure which listings are useful.

To operate your account and keep you signed in; to show you your own tracker history and saved programs; to answer your questions through the AI assistant; to run the community; to send the emails you asked for; to understand which content is worth expanding; and to detect abuse or misuse of the platform.

We do not sell your personal information. We do not use your tracker entries or AI conversations to target advertising at you.

We process account and profile data to perform our contract with you; analytics and abuse prevention on the basis of our legitimate interests in running and improving a safe service; marketing emails on the basis of your consent, withdrawable at any time; and health data you enter into the tracker on the basis of your explicit consent, given by choosing to enter it. You can withdraw that consent by deleting the entries or your account.

Infrastructure providers who host the site and database on our behalf, under contract and only to provide the service.

AI model providers. Messages you send to the AI assistant are transmitted to a third-party model provider to generate a reply. Do not put information into the assistant that you would not want processed by a third party.

Marketplace partners. Partners listed in the marketplace are independent third parties. When you follow an affiliate link you leave our site and their privacy policy applies. We do not pass your name, email, or tracker data to them.

We may also disclose information where we are legally required to, or to protect the rights and safety of our users.

We keep account data for as long as your account is open. You can delete individual tracker entries, posts, and conversations at any time. If you ask us to delete your account, we remove your personal data and associated entries, except where we are required to retain something to comply with a legal obligation. Content you posted publicly may persist in anonymised form where removing it would break a discussion thread.

Depending on where you live, you may have the right to access a copy of your data, correct it, delete it, restrict or object to processing, port it elsewhere, and withdraw consent. California residents have the right to know what is collected and to request deletion, and not to be discriminated against for exercising those rights.

To exercise any of these, email privacy@smartpeptide.com. We will respond within the timeframe the applicable law requires.

Our infrastructure is operated in the United States. If you access the site from outside the United States, your information will be transferred to and processed there, under appropriate safeguards where required.

SmartPeptide is intended for adults aged 18 and over. We do not knowingly collect information from anyone under 18. If you believe a minor has created an account, contact us and we will remove it.

Passwords are hashed, traffic is encrypted in transit, and access to production data is restricted. No system is perfectly secure, and we cannot guarantee absolute security.

If we change this policy materially we will update the date above and, where the change is significant, notify account holders. Questions go to privacy@smartpeptide.com.