Privacy Policy
Last updated 3 September 2026
The short version. We collect your name and email address when you register, so we can send you the product series you signed up for. We do not sell your data. Email support@peptidelockr.com or use the contact form, and we will delete your account and everything attached to it.
Who we are
Peptide Lockr is an independent product-comparison publisher. We research research-use compounds and consumer peptide products, publish what we find, and earn affiliate commission when someone buys through our links. We are not a vendor, a pharmacy, or a clinic, and we do not sell, ship or handle any product.
What we collect
- Your name and email address, because you typed them into the registration form.
- A password, which we never store. What we keep is a scrypt hash with a per-account random salt; the password itself is not recoverable from it, by us or by anyone who obtained our database.
- Which page you registered from, so the emails you get are about the products you were actually looking at.
- A session cookie after you log in. It holds a random token, is HTTP-only, and is the only cookie we set ourselves.
- Whether you opened or clicked our emails, and which affiliate links were clicked. This is aggregate performance data — it tells us which products people care about.
We do not ask for and have no use for your postal address, phone number, date of birth, or any payment details. There is no payment step anywhere on this site.
Email verification
When you register we check that the address is deliverable — the format, that the domain is not a known disposable-inbox provider, and that it publishes mail servers — then send a confirmation link. Your account does nothing until you click it. This is why we cannot be used to send mail to an address that is not yours.
Who your data goes to
- Mailgun delivers our email. They process your address in order to send it.
- Supabase hosts our database.
- Vercel hosts and serves this site.
- Meta receives conversion events for advertising measurement. Where an event includes an email address it is hashed before it is sent.
- Dub handles affiliate link tracking, and reports back when a purchase is attributed to one of our links.
That is the complete list. We do not sell your data, we do not rent mailing lists, and we do not pass your address to any product vendor.
Leaving
Every email we send carries a one-click unsubscribe link and the standard List-Unsubscribe headers, so your mail client’s own unsubscribe button works too. Unsubscribing stops the emails and keeps your account. To have the account and all associated records deleted outright, ask us via the support@peptidelockr.com, or use the contact form, and we will do it.
Retention
We keep your account for as long as it exists. Login sessions expire on their own. If you unsubscribe and never come back, we delete the account after twelve months of inactivity.
Children
This site is not intended for anyone under 18 and we do not knowingly register anyone under 18.
Changes
If we change this policy we will change the date at the top. If a change materially affects what we do with data we already hold, we will email you about it rather than rely on you re-reading this page.