governance manual

Privacy Policy

Draft — pending legal review. This page describes our privacy practices and engineering commitments as designed. It has not yet been reviewed by an attorney and should not be treated as a final legal document until that review is complete.

What we collect

Our submission form is designed to collect the minimum information necessary to support the archive's mission: broad demographic categories, information about peptide use, and a free-text description of your experience. We do not ask for your name, email address, phone number, street address, username, or wallet address, and the form has no field for any of them.

What we don't collect

We do not store your exact IP address alongside your submission. Security and rate- limiting systems may briefly process a hashed, salted version of your IP address to prevent abuse; this is never linked to your submission content, is retained only briefly, and access to it is restricted.

How your submission is protected

  • Data is encrypted in transit and at rest.
  • Administrative accounts require multi-factor authentication.
  • Access to submissions is restricted by role — most staff only see de-identified or aggregated data.
  • All administrative actions are logged in an audit trail.
  • We do not publicly expose raw database records.

How your submission may be published

If approved, your observation may be published anonymously in the Observational Archive and reflected in aggregated dashboard statistics. Direct quotation only happens if you opt in during submission. Before publication, we remove personal identifiers, supplier information, purchasing information, promotional language, and direct medical instructions, while preserving the meaning of what you shared.

Withdrawing your submission

You'll receive a one-time withdrawal code after submitting. Using it removes your observation from public view and from future dashboard totals. Because submissions are anonymous, we have no way to verify or recover a lost code, and no way to identify or withdraw a submission without one.

Data retention

We retain submissions, including withdrawn ones, for audit-integrity purposes, but withdrawn submissions are excluded from public display and aggregate statistics. Security logs are retained for a limited period and are not linked to submission content. A detailed retention schedule will be published here following legal review.

How we do not use your data

We do not use submissions to target you or anyone else with medical or product advertising. We do not sell data. We do not accept funding from peptide manufacturers, distributors, or sellers.

Research use

Aggregated, de-identified data may be shared with external researchers through a documented request-and-review process. Raw, individual submissions are never shared externally.

Contact

Questions about this policy, or requests related to your submission, can be sent through our Contact page.