Privacy Policy
PepSqueak is a free companion tool for research peptide protocols. This policy explains what we collect, what we deliberately don't, and who processes it. We've tried to write it in plain language rather than boilerplate, because a policy nobody can read protects nobody.
It covers meetpepsqueak.com (this site) and the PepSqueak app at app.meetpepsqueak.com.
The short version
- You can use most of the app without an account, and browse this site without one entirely.
- Progress photos never leave your device. They are stored in your browser and are never uploaded to us.
- We do not sell your data, and we do not share it with advertisers.
- We never see your card details. Donations are processed entirely by Stripe.
- You can delete your account and its data at any time.
What we collect
When you visit this site
We use Google Analytics to understand which pages people find useful. It sets cookies and records things like the pages you view, roughly where in the world you are, and what kind of device you're on. We don't use it to identify individuals. Our web host also keeps standard server logs, including IP addresses, for security and troubleshooting.
When you create an account in the app
An account is optional and free. To create one we collect your email address and a password, which is stored hashed — we cannot read it. Accounts exist so your data can sync across your devices and so reminders can reach you.
Signup is protected by Cloudflare Turnstile, which checks that you're a person rather than a script. It sees your IP address and basic browser signals.
What you enter in the app
Whatever you choose to track: peptides and protocols, doses and schedules, injection sites, and any metrics you log such as weight, sleep, energy or mood, plus any notes you write. This is stored against your account so it's there when you come back. We do not analyse or interpret it, and we do not share it.
Progress photos
Photos stay on your device, in your browser's local storage. They are never uploaded to our servers, never synced between devices, and we cannot see them. Clearing your browser data or switching devices will lose them, which is the trade-off for keeping them private.
Dose reminders
If you turn on reminders, we store a push subscription for your browser and your timezone, so notifications arrive at the right local time. Turn reminders off and the subscription is removed.
The AI assistant
If you use the assistant, the text of your question is sent through our server to Anthropic to generate an answer, and the assistant may search the web to answer it. Your question is not linked to your identity for that purpose. Please don't include personal or identifying details in what you ask. The assistant is educational only and does not diagnose or prescribe.
Donations
Donations are handled entirely by Stripe. Card details go directly to Stripe and never touch our servers — we don't receive or store them. Stripe provides us with your name, email address and the amount, so we can recognise the donation and contact you if something goes wrong. Stripe emails your receipt.
PepSqueak is not a registered charity and donations are not tax-deductible.
Contacting us
The contact form on this site opens your own email application — it doesn't submit anything to us in the background. When you email us we receive whatever you send, and we keep it so we can reply.
Who processes your data
We use a small number of established providers, each doing one job:
- Supabase — accounts and the protocol data you enter
- Cloudflare — hosting the app, delivering it, and anti-bot checks on signup
- Bluehost — hosting this website
- Stripe — donation payments
- Google Analytics — website usage statistics
- Anthropic — generating assistant responses, when you use that feature
What we don't do
- We don't sell or rent your personal information.
- We don't share your tracking data with advertisers, data brokers, or the companies we link to for sourcing.
- We don't upload your progress photos.
- We don't use your data to make decisions about you.
Your choices
- Delete your account. Email us and we'll delete your account and the data attached to it. Some information may persist briefly in encrypted backups before ageing out.
- Export or correct your data. Ask and we'll help. Most of it you can also edit directly in the app.
- Analytics. Browser settings, tracker blockers, and Google's opt-out add-on all work on this site.
- Reminders. Turn them off in the app, or revoke notification permission in your browser.
Depending on where you live you may have additional rights over your personal data, including access, correction, deletion and portability. Email us and we'll honour them.
How long we keep things
Account and tracking data is kept until you delete your account or ask us to remove it. Donation records are kept as long as required for accounting and tax purposes. Analytics data expires on Google's standard retention schedule.
Age
PepSqueak is intended for adults. It is not directed at anyone under 18, and we don't knowingly collect data from children. If you believe a child has created an account, email us and we'll remove it.
Research and educational use
PepSqueak is an educational reference for research use. It does not provide medical advice, does not diagnose or prescribe, and is not a substitute for a licensed clinician. Suggested figures in the app are commonly cited ranges, not recommendations for you.
Changes
If we change how we handle your data, we'll update this page and change the date at the top. If a change is significant — for example, if we ever begin sharing account information with another system — we'll say so clearly before it takes effect.
Contact
Questions about this policy, or about your data, go to [email protected].