governance manual

Privacy Policy

Draft — pending legal review. This page describes our privacy practices and engineering commitments as designed. It has not yet been reviewed by an attorney and should not be treated as a final legal document until that review is complete.

What we collect

Our observation form collects broad demographic categories, information about peptide use, and your account of the experience. The observation form does not ask for a name, email address, phone number, street address, username, or wallet address. The Record currently uses a private code, not an account sign-in. Contact and future newsletter sign-ups are separate from the observation form.

Terms we use

Anonymous submission: the form does not ask for a name, email address, phone number, street address, username, or wallet address. Private code: a random code shown once that lets the submitter withdraw the observation or add a follow-up. It is held only by the submitter and is not linked to an identity, so it is a pseudonymous identifier, not a personal one. De-identified record: a published observation from which personal identifiers, supplier information, and purchasing information have been removed, shown with broad demographic categories.

What we don't collect

We do not store your exact IP address alongside your submission. Security and rate- limiting systems may briefly process a hashed, salted version of your IP address to prevent abuse; this is never linked to your submission content, is retained only briefly, and access to it is restricted.

How your submission is protected

  • Connections to the public site are protected in transit by the production hosting platform.
  • Administrative sign-in requires a password and a time-based one-time authenticator code.
  • Administrative access is restricted through role-based permissions.
  • Governed moderation, publication, account, security, and other administrative actions covered by the audit system are recorded in audit history.
  • Raw database records are not exposed through the public archive or dashboard interfaces.

How your submission may be published

If approved, your observation may be published in de-identified form in the Observational Archive and reflected in aggregated dashboard statistics. Direct quotation only happens if you opt in during submission. Before publication, we remove personal identifiers, supplier information, purchasing information, promotional language, and direct medical instructions, while preserving the meaning of what you shared.

Withdrawing your submission

New submissions receive one private Record code after filing. The same code opens the observation, permits follow-ups, and requests withdrawal. Some older submissions require their original two codes. Withdrawal removes a public observation from display and future dashboard totals; the underlying archive record is retained. Codes are displayed once and cannot be recovered if lost. No account or email recovery is currently offered for observation codes.

Data retention

Anonymous submissions are retained as archive records for research continuity and audit integrity. If a submission is withdrawn using its Record code (or the original codes for older submissions), the underlying record is retained but is excluded from public display and future aggregate statistics. Audit records are retained to preserve the history of governed actions. Hashed rate-limiting identifiers are temporary security records and are eligible for deletion after their applicable rate-limit window expires. Backup retention is managed as an operational infrastructure control and is verified separately from application-level retention enforcement.

How we do not use your data

We do not use submissions to target you or anyone else with medical or product advertising. We do not sell data. We do not accept funding from peptide manufacturers, distributors, or sellers.

Research use

Aggregated, de-identified data may be shared with external researchers through a documented request-and-review process. Raw, individual submissions are never shared externally.

Contact

Questions about this policy, or requests related to your submission, can be sent through our Contact page.