Privacy Policy

Short version: pepmg has no accounts and runs no ad networks. Browsing the site stores no personal data about you; the only personal information we ever hold is what you choose to send us (a newsletter email, a contact-form message). This page says exactly what that means.

Last updated 2026-07-02.

▸ What we do not collect

No accounts. There is nothing to sign up for — no passwords, no profiles.
No IP addresses stored. We never write your IP to our database.
No raw user-agent, no device fingerprint, no advertising ID.
No third-party ad or tracking networks. No Google Analytics, no Meta pixel, no data brokers.
We never sell, rent, or share data about you.

▸ What you can choose to give us

Newsletter: if you subscribe to price-drop emails, we store the email address you enter, solely to send you those emails. Every email includes an unsubscribe path, and unsubscribing removes the address.
Contact form: if you write to us, we store the name, email, and message you submit, solely to read and reply.
Price-drop alerts: if you "watch" a compound, we store your email and which compound you watch, solely to email you when a vendor lowers that price. Every alert has a one-click stop link that deletes all your watches immediately.

Both live in our own database (Cloudflare D1) and go nowhere else — no marketing lists, no third parties. Email hello@pepmg.com anytime to see or delete what you've sent us.

▸ Outbound-click measurement

When you click through to a vendor, the link routes via our /go redirector so we can count interest. For each genuine (non-bot) click we store only:

which vendor and compound you clicked,
your country (coarse, derived at the edge — never a precise location),
a one-way hash of your browser's user-agent (a short fingerprint of the browser type, not reversible to you and not linked across sites),
a timestamp.

That's the whole record. It cannot be tied back to an individual. Automated/bot traffic is filtered out before anything is stored. We use this only to know which comparisons are useful and, where a vendor relationship exists, to reconcile referrals.

▸ Referral tags on outbound links

Outbound vendor links carry utm_* parameters and a pepmg_src marker so a vendor can see a visit came from pepmg. For our affiliate partners, the link also carries that partner's referral credit (for example ref=PEPMG10, ref=pepmg, or a /ref/…/ path) so we're paid the commission we disclose on /disclosure. Either way these identify pepmg as the referrer, not you. Once you land on a vendor's site, that vendor's own privacy policy governs; we don't control it.

▸ Analytics

If enabled, we use Cloudflare Web Analytics, which is cookieless and privacy-first: it records aggregate page views without cross-site tracking, cookies, or fingerprinting for advertising. We may also see standard, transient server-request metadata processed by our host (Cloudflare) to serve and secure the site.

▸ Cookies

We set no advertising or tracking cookies. The site is static and works without them.

▸ Your rights & contact

From browsing alone we hold nothing about you. If you've subscribed or written to us, email hello@pepmg.com to access, correct, or delete it — we'll do it promptly, no process. Questions about this policy go to the same address.

All products listed are sold by third-party vendors for laboratory and research use only (RUO). Where an FDA label or a peer-reviewed study has published a dose, pepmg reports it with the source named, because that is safer than guessing. It is a report, not medical advice and not a recommendation to use anything. pepmg sells nothing and ships nothing. Listings are price-tracking data, not endorsements.