Privacy policy
What Peptigraph collects, why, who handles it and how long it is kept. In short: no cookies, cookie-free analytics, and only the data you choose to send us through a form.
The short version
- The site sets no cookies and stores nothing in your browser.
- Analytics are cookie-free and aggregate. We cannot identify you from them.
- We only receive personal data you choose to send: an email address for alerts, or what you type into a form.
- Email alerts need double opt-in: nothing is stored until you click the link in the confirmation email.
- We do not sell, rent or trade personal data, and we do not use it for advertising.
Peptigraph is published by [publisher / company name], which is responsible for the data described here. Questions and requests: [contact email].
When you browse the site
The site is hosted on Vercel. Like any web server, it records technical request logs: your IP address, browser and device details (user agent), the page requested, the referring page and the time. This includes the words in the address bar, so a site search (/search/?q=…) appears in these logs. We use the logs only to deliver the site, keep it secure and fix errors.
Retention: [retention period]. Pages, fonts and scripts are served from our own domain; we do not load advertising, social media or other third-party tracking code. The site search runs in your browser on a file we publish, so typing in the search box does not send your query anywhere.
Analytics
On the live site we use Vercel Web Analytics and Vercel Speed Insights to count visits and measure page speed. Both are cookie-free: they set no cookies, use no browser storage and do not follow you across other websites. They record aggregate data such as the page viewed, the referring site, country, browser, operating system and device type, and page-load performance measurements.
According to Vercel’s documentation, visits are grouped using a hash of the incoming request that is discarded after 24 hours, rather than a stored identifier. See Vercel’s analytics privacy notes. Analytics do not run on preview or development versions of the site.
Email alerts
When you subscribe to alerts we receive your email address and the topic you subscribed to (for example a peptide or a vendor dossier). We send you one confirmation email through Resend, our email provider. It contains a signed link that works for 48 hours. Until you click it, your address is not added to any list; if you ignore it, nothing is kept by us.
When you confirm, your email address is added to our alerts list, stored with Resend, and we email you when the status of what you follow changes. Every alert email has a one-click unsubscribe link, and you can also ask us at [contact email]. After you unsubscribe we keep your address only as an unsubscribed entry, so we never email you again by mistake, for [retention period].
Legal basis (where GDPR applies): your consent, which you can withdraw at any time by unsubscribing.
Corrections and page requests
Report an error. The corrections form sends us the page, your description, an optional source link and, if you give one, your email address. Resend delivers it to our editors’ inbox. We use it to check the report and, if you left an address, to reply. The corrections log may describe what changed on a page; it never shows your name or email. Retention: [retention period].
Page requests. When a search finds nothing you can ask us to cover it. That sends only the search words to our editors’ inbox through Resend, with no email address or name. Retention: [retention period].
Abuse protection. To stop spam, our servers briefly use your IP address in memory to limit how many forms can be sent in a short time. It is not written to a database.
Legal basis (where GDPR applies): our legitimate interest in keeping the reference accurate and answering readers.
Who handles the data
We use two service providers, each acting on our instructions:
- Vercel: hosting, request logs and analytics (privacy policy).
- Resend: sending the confirmation and alert emails, storing the alerts list and delivering form messages (privacy policy).
Both may process data in the United States. We do not sell or share personal data with anyone else, and we do not use it for advertising or profiling.
Your choices and rights
You can ask us what personal data we hold about you, ask us to correct or delete it, object to how we use it, or withdraw consent for alerts. Email [contact email] and we will reply within [response time]. Depending on where you live, you may also complain to your data protection authority.
The site is a general reference for adults and is not directed at children. We do not knowingly collect data from anyone under 16.
Changes to this policy
If we change how we handle data, we update this page and its effective date before the change takes effect. Significant changes affecting alert subscribers are also announced by email.