Privacy policy

We collect only the data we need to operate and improve the Site. Specifically:

• Information you provide directly. When you email us, submit a correction, or otherwise contact us, we collect your email address, any name you choose to share, and the contents of your message.
• Automatically collected information. When you browse the Site, our servers and analytics tooling automatically collect standard web log data: IP address, approximate location derived from IP, browser type and version, operating system, referring and exit pages, pages viewed, time on page, and the date and time of your visit.
• Cookies and similar technologies. Subject to the consent choice described in Section 3, we use cookies and browser local storage to remember your preferences and, when permitted, to measure traffic and understand how readers use the Site.
• Click data. When you click an outbound link to a provider, we may record that click so we can understand which reviews are useful and report accurate aggregate traffic to the providers we link to.

We do not ask for, collect, or store sensitive health information such as diagnoses, prescriptions, lab results, body weight, or insurance member IDs. Any calculator on the Site runs entirely in your browser; the values you enter are not transmitted to us or stored on our servers unless we explicitly say otherwise on that page.

We use the information we collect to:

• Operate, maintain, and secure the Site;
• Reply to questions and correction requests you send us;
• Understand which pages, reviews, and tools are useful to readers so we can improve the Site;
• Attribute outbound clicks and report aggregate traffic to providers we link to;
• Prevent fraud and abuse, secure the Site against misuse, and enforce our Terms of Service; and
• Comply with applicable legal obligations.

Your cookie preferences are under your control. We run Google Consent Mode v2, and it defaults to denied. On your first visit you will see a cookie banner; until you affirmatively accept, analytics and advertising storage stay off — no analytics cookies are set and no non-essential tracking runs. Your choice is stored under the cookie-consent key in your browser's local storage — on your device, not on a server we control.

• Analytics cookies (consent-gated). If — and only if — you accept, we load Google Analytics 4 (GA4) to measure aggregate traffic. GA4 does not identify you individually. Data Google processes is governed by Google's Privacy Policy.
• Outbound click links. When you click a link to a provider and leave the Site, the destination site (and any tracking network behind it) may set its own cookies to attribute a signup. Those cookies belong to the destination site, not to us, and are governed by that site's own privacy policy.
• Functional storage. We use your browser's local storage to remember your cookie choice and similar preferences. This does not leave your device.

You can change your choice at any time by clearing this Site's stored browser data, which resets the consent banner and asks you again on your next visit. Browser controls and extensions can also block analytics outright, though parts of the Site may not work as intended if you disable functional storage.

We do not sell your personal information. We share limited data only with the following categories of service providers:

• Analytics providers. If, and only if, you have accepted cookies, pseudonymous traffic data is processed by our analytics provider (Google Analytics 4) to help us understand aggregate Site usage. That provider acts on our behalf and is bound by its own published terms.
• Hosting and infrastructure. The Site is hosted on Vercel, which processes server logs and stores some operational data on our behalf.
• Affiliate networks we work with. When you click an outbound link to a provider, that provider and any affiliate network behind it will receive referral data — the page you came from, the timestamp, and a non-identifying tracking parameter we generate to attribute the click. Each network operates under its own privacy policy and is responsible for the data it collects once the click hands off. None of these partners receive information you provided directly to us, such as the contents of an email you sent our contact address. See our Affiliate Disclosure for how commercial relationships factor into our coverage.
• Legal and safety. We may share information when legally required — for example, in response to a valid legal request — or when necessary to protect the rights, property, or safety of our readers or the public.

Regardless of where you live, you may contact us at hello@peptiderank.org to ask what personal information we hold about you, request that we correct or delete it, or opt out of analytics. We aim to respond to verifiable requests within 30 days. If we need to verify your identity before acting on a request, we will ask only for the minimum information needed to match your request against records we already hold.

For the fastest way to withdraw analytics consent, clear your browser's stored data for peptiderank.org; the consent banner will reappear on your next visit, and declining will keep Google Analytics from loading on subsequent visits.

If you are a California resident, the California Consumer Privacy Act and the California Privacy Rights Act give you the right to:

• Know what categories of personal information we have collected about you, the sources of that information, and how we use and disclose it;
• Delete personal information we have collected from you, subject to certain legal exceptions;
• Correct inaccurate personal information we maintain about you;
• Opt out of the "sale" or "sharing" of your personal information, including for cross-context behavioral advertising;
• Limit the use of any sensitive personal information we hold (we do not knowingly collect sensitive personal information, including health data, from Site visitors); and
• Exercise any of the above rights without being discriminated against for doing so — we will not deny you goods or services, charge you a different price, or provide a different level of service because you exercised a privacy right.

We do not sell personal information as that term is defined under the CCPA, and we do not knowingly sell or share the personal information of minors under 16 for cross-context behavioral advertising. To exercise any of the above rights, email hello@peptiderank.org with "California Privacy Request" in the subject line. You may also designate an authorized agent to submit a request on your behalf; we may still require you to verify your own identity directly with us before we act on it.

Jurisdictional scope. PeptideRank is a United-States-focused publication. The telehealth providers and pharmacy-fulfilled products we cover are, in most cases, available only to patients located in the United States with a valid US prescription issued by a US-licensed provider. We do not market the Site to residents of the European Economic Area, the United Kingdom, or Switzerland, and nothing on the Site should be read as an offer of telehealth services or prescription medication to EU, UK, or Swiss residents.

That said, if you are located in the EEA, the UK, or Switzerland and you do visit the Site, the General Data Protection Regulation (GDPR) and the UK GDPR still give you rights with respect to any data we process about you: the right of access to a copy of your data, the right to rectification of inaccurate data, the right to erasure (“right to be forgotten”), the right to restriction of processing, the right to data portability, and the right to object to processing. You also have the right to withdraw any consent you previously gave — for example, by declining cookies on our consent banner — and the right to lodge a complaint with your local supervisory authority (for EU residents, your national data protection authority; for UK residents, the Information Commissioner's Office). We honor these rights regardless of whether the products we cover are actually available to you.

Our lawful bases for processing (GDPR Article 6).

• Art. 6(1)(a) — Consent. We rely on your freely-given, specific, informed, and unambiguous consent for loading Google Analytics and its cookies, which happens only if you accept our cookie banner. You can withdraw consent at any time by clearing your cookies and declining when the banner reappears.
• Art. 6(1)(b) — Contract / pre-contractual steps. When you email us with a question or a correction, we process your message to respond to your request.
• Art. 6(1)(f) — Legitimate interests. We rely on our legitimate interests in running a secure, accurate comparison site: operating and securing the Site, preventing abuse, and the internal click-attribution described in Section 3. We balance these interests against your rights and freedoms, and you may object to processing on this basis by contacting us.
• Art. 6(1)(c) — Legal obligation. We process data where required by applicable law, for example in response to a valid legal request from a competent authority.

We do not process special categories of personal data (health data, biometric data, etc.) under GDPR Article 9, and we do not make any decision about you based solely on automated processing (including profiling) that produces legal or similarly significant effects within the meaning of GDPR Article 22.