Privacy policy

The plan builder and the theme switch use your browser's local storage. Your saved protocol — compounds, doses, frequencies, notes — is written to your own browser and is never transmitted anywhere. Clearing your browser data deletes it permanently, and we have no copy to restore.

The COA reader parses uploaded PDFs entirely inside your browser using a local library. The file is read into memory, the text is extracted on your machine, and nothing is uploaded. You can confirm this by opening your browser's network tab while analysing a report — there is no request. This is deliberate: a certificate of analysis usually identifies the supplier it came from.

Only the COA submission form sends anything. When you submit a certificate we store the fields you filled in — compound, lab, batch code, test date, purity, endotoxin, sterility, mass spec result, verdict, notes and any source URL — plus the report file if you chose to attach one.

Two fields are optional and are the only ones that can identify you:

• ·Name or handle — published alongside the entry if you provide it. Leave it blank and the submission is anonymous.
• ·Contact email — visible only to moderators, used solely to query an unclear submission. It is never published, never used for mail-outs, and never shared.

You do not need to provide either. A submission with both left blank is genuinely anonymous — we do not log IP addresses against submissions.

There is no Google Analytics, no advertising pixel, no social media tracker and no cross-site cookie on this site. Nothing follows you elsewhere.

Our host records standard server request logs (IP address, timestamp, page requested, user agent) as every web server does. These are held by the host for a short retention period for security and abuse prevention, and are not used to build any profile of you.

Submitted entries and files are stored in a Supabase database and object store. The site is served by Netlify. Both act as data processors on our behalf. No submitted data is sold, rented, or shared with advertisers — there are none, because nothing on this site is for sale.

Approved COA entries are intended to stay in the library indefinitely — a certificate library only works if old batches remain comparable. Rejected submissions and their files are deleted during moderation. Contact emails are deleted once a submission has been reviewed.

Under UK GDPR you can ask what we hold about you, ask for it to be corrected, ask for it to be deleted, or object to it being processed. In practice, for this site that almost always means removing a submission you made.

Email privacy@learntopeptide.com with enough detail to find the entry — the compound, lab and batch code is usually enough. We will action it within 30 days. If you are unhappy with the response you can complain to the Information Commissioner's Office at ico.org.uk.

If you submitted anonymously and provided no email, we may have no way to verify the submission was yours. Tell us as much as you can about it and we will use judgement.

This site is not intended for anyone under 18. The material concerns research chemicals and is written for an adult research and educational audience.

If this policy changes materially, the date at the top changes with it. There is no mailing list to notify, by design.