Effective September 29, 2026
Information processed automatically
Like most hosted websites, Peplexicon and its infrastructure provider process basic request and device information needed to deliver, secure, and operate the service. This may include IP address, request time, requested page, browser and device information, approximate location derived from IP address, referrer, and diagnostic logs.
Analytics and performance
Peplexicon uses Vercel Web Analytics for aggregated traffic measurement and Vercel Speed Insights for real-user performance measurements. The current Web Analytics implementation is designed without analytics cookies and reports aggregated information rather than persistent cross-site visitor profiles. Performance measurements may include page-load and interaction timing, device category, browser, and route information.
Searches and assistant queries
Peptide-library filters run in your browser. Site search text is sent to our AI service providers, OpenAI (to match your words to published evidence) and TypeSafe (to judge which results answer your search), only to return results. If you turn on Peplexicon AI answers (they are off unless you do), questions and the matching published passages are also sent to an AI model provider, currently OpenAI, to write the short answer, and a cookie remembers that choice; a one-way hash of your network address is kept for ten minutes to limit abuse. Queries submitted to the public evidence assistant are processed to return a response and are not stored by the Peplexicon application. Infrastructure security and diagnostic logs may still record request metadata, but the application does not intentionally place query text into analytics events.
My Peplexicon without an account
If you are not signed in, peptides and stacks you save stay in local browser storage and are not sent to Peplexicon. Clearing browser storage or changing devices may remove them. They are not treated as a medical record.
Accounts
An account is optional. If you create one, Peplexicon processes your email address; your name and profile image if you choose Google sign-in; a record that the address is verified; session records with the time, IP address, and browser details needed to keep you signed in and protect the account; and the peptides and named stacks you save. One-time sign-in codes are stored only as hashes and expire after ten minutes. If you sign in with Google, Google shares your basic profile and verified email; Peplexicon does not use your Google account for anything else and keeps any Google tokens encrypted. Anything saved in your browser before you sign in is moved into your account. Stacks are organizational labels: do not enter symptoms, doses, diagnoses, or other sensitive health information.
Newsletter and peptide updates
If you subscribe to the Peplexicon newsletter or to updates for specific peptides, Peplexicon processes your email address, the topics you chose, the page where you signed up, a confirmation token stored only as a one-way hash, delivery state, and request, confirmation, and unsubscribe times. Nothing is sent beyond the confirmation email until you confirm. Email is delivered through our email service provider, Resend, which processes your address and delivery events such as bounces and complaints to send the mail. This information is used only to send what you asked for, prevent abuse, and honor opt-outs. Every email includes an unsubscribe link that stops all Peplexicon email to that address.
How information is used
- Deliver and secure the website.
- Measure reliability, performance, and aggregate usage.
- Diagnose failures and prevent abuse.
- Improve navigation and evidence coverage.
Sharing and sale
Peplexicon does not sell personal information. Information may be processed by service providers that host the website and database, deliver requested email, prevent abuse, or measure aggregate performance, or disclosed when required to protect the service, users, or legal rights.
Retention and your choices
Unsubscribe links stop all future Peplexicon email. Pending requests that are never confirmed may be deleted after a limited verification window; minimal suppression records may be retained to honor opt-outs. Signed-in users can download everything stored about their account and permanently delete it from the account settings page; deletion removes the sign-in, saved peptides, stacks, and email follows, keeping only an anonymous record that an account once existed and, where needed, a suppression record so a bounced or complaining address is not emailed again. Operational and security retention varies by purpose and service-provider configuration. For any other privacy request, email hello@peplexicon.com.
Children and medical information
The public site is not directed to children under 13 and should not be used to submit personal medical information. Peplexicon is an educational reference, not a patient portal or healthcare provider.
Changes to this notice
Material changes will be reflected by an updated effective date. New data-collecting features will be described before or when they launch.