Skip to content

Privacy policy

Last updated 30 September 2026

Who we are

This policy covers Peptide Decode (peptidedecode.com and research.peptidedecode.com). In it, “we” and “us” mean the operator of the site.

To reach us about your data, use the contact page, or reply to any email we have sent you.

What each form collects

Every form also records which page you were on and when you submitted it. Each has a hidden field that only spam bots fill in. Submissions that fill it are thrown away.

Mailing list and interest forms

The short forms collect your email address, and on some pages your name (optional). The fuller form on guide pages collects your name, email address, an optional phone number, the topics you tick, whether you want to join the general mailing list, and whether it is OK to text or call you.

The quiz

The quiz collects your answers, your first name, your email address, an optional phone number, and your choices on the two consent boxes (email updates and text reminders). The answers are:

  • your goal and what is driving it
  • your experience level and where you get peptides
  • your age range, sex and budget
  • whether you want a supplier introduction.

Some of these answers say something about your health, for example that you are recovering from surgery. They are stored with your email address like everything else you submit.

“Email me my vial plan”

The vial-plan form on vial pages collects your email address, the vial page you were on, the water volume and dose you picked, the date you mixed (or plan to mix) the vial, whether you want a reminder, and whether you want occasional research updates. Nothing else from the form is stored.

“Email me this” on the tools

The protocol builder, the dosage calculator and the reconstitution chart collect your email address, which tool you used, the choices you made in it (compounds, doses, vial size, water volume and similar), and whether you want occasional research updates.

The research-access form

The research-access form (at /research-access/, its per-compound versions, and research.peptidedecode.com) collects your name, email address and an optional phone number. It also records which compound page you were on, the full address of the page you landed on, and any ad campaign tags in that address (UTM tags and the Google, Facebook and TikTok click IDs). Submitting it confirms you are over 21.

Where it is kept

  • Our database. Every submission is stored in a database run by our own leads service, hosted on Railway. The database is only reachable over the host's private network. The people who run the site see it through a password-protected dashboard.
  • Our team inbox. For the mailing-list and interest forms, the quiz and the research-access form, a copy of everything you submitted is also emailed to our team inbox. Vial-plan and tool submissions are not.
  • Your own browser, briefly. If our server cannot be reached when you submit the mailing-list, interest, quiz or research-access form, the submission is saved in your browser's local storage and sent again on your next page view. It is removed once our server accepts it, and dropped if it is more than 30 days old.
  • Our server's memory, for an hour. For vial-plan and tool emails, we keep your IP address in memory for up to an hour to limit how many emails one connection can request. It is never written to the database.
  • Our service logs. When a research-access sign-up is passed to Spartan Peptides, the email address is written to the leads service's logs on Railway.

What we email you, and when

  • Your vial plan goes out as soon as you submit the form. If you ticked the reminder, we send one more email two days before the vial reaches 28 days after mixing, as long as that date has not already passed.
  • Tool emails (your protocol, your numbers, the reconstitution chart) go out once, straight away.
  • The quiz and the research-access form can put you on a short email series for the goal you picked. When a series is running for that goal, it is three emails: one when you sign up, one three days later, and one seven days after that. The series is how we send quiz results, so it goes to everyone who completes the quiz, whether or not they tick “Send me email updates”. On research goals, these emails can introduce a research supplier with a discount code. We earn a commission if you buy, and the email says so before the link.
  • Mailing-list and research-update boxes. When you tick one, we record it. No regular newsletter is running at the time of writing. Mailing-list and interest-form sign-ups are not put on the goal series.
  • Text messages. We do not send any. If you give us a phone number it is stored, and our team can see it. The research-access form is different: see the next section.

All of our emails are sent through SendGrid, which receives your email address, your name if you gave one, and the content of the email.

What we share, and with whom

The research-access form: Spartan Peptides

When you submit the research-access form, we send your details to Spartan Peptides, the research supplier the form takes you to. They go into Spartan Peptides's account on Klaviyo, the email and text marketing platform they use. What we send is your name, email address, phone number (if you gave one), the compound page, the address of the page you signed up on, any ad campaign tags, the time you signed up, and a note that you confirmed you are over 21.

Your email address is subscribed to Spartan Peptides's marketing emails. If you entered a phone number in a valid format, it is also subscribed to their marketing texts. On this form, giving a phone number is your agreement to marketing texts, as the text above the button says. When the form sends you on to Spartan Peptides's site, the link carries your campaign tags, plus tags saying you came from us.

From then on, Spartan Peptides holds its own copy under its own privacy policy. Unsubscribing from our emails does not unsubscribe you from theirs, and deleting your record with us does not delete theirs. Use the unsubscribe link in their emails, or contact Spartan Peptides directly.

No other form is passed to a supplier or partner. Quiz, mailing-list, interest, vial-plan and tool submissions stay with us.

Every page: the Trakt tracking script

Every page on this site loads a tracking script from Trakt (trytrakt.com), set up for Spartan Peptides. Its job is to connect an ad click, your visit here, and what you later do on Spartan Peptides's site. On each page view it sends Trakt:

  • the page's address and title, and the page you came from
  • any campaign tags and ad click IDs in the address
  • a random visitor ID and session ID.

Like any web request, this also gives Trakt your IP address and browser details.

On the research-access form, the script is also given your email address and name when you submit. That is how your sign-up, and any purchase you later make at Spartan Peptides, are matched to your visit here. When you follow a link to Spartan Peptides's site, or the form sends you there, your visitor and session IDs are added to the link so the two visits can be joined up.

Services that run the site for us

Railway hosts the website, the leads service and its database. SendGrid sends our emails. They handle your data to provide those services to us. These companies, Klaviyo and Trakt may store data outside the country you live in.

Cookies and browser storage

Our own code sets no cookies. The Trakt script sets:

  • pg_visitor_id, a cookie that lasts 90 days, with the same ID also kept in local storage
  • pg_session_id, a cookie that ends when you close your browser, also kept in session storage
  • ad click IDs (such as pg_gclid and pg_fbclid) in local storage, which it uses for 30 days.

Our own local-storage entry, pd_leads_queue, exists only while a form submission is waiting to be resent (see above). You can block or clear all of these in your browser settings, and the site and its forms still work.

How long we keep it

Nothing is deleted automatically. Your record in our database, the log of emails we have sent you, and the copy in our team inbox stay until you ask us to delete them or we delete them ourselves. Unsubscribing stops the emails but does not delete the record. What Spartan Peptides and Trakt hold is kept on their terms, not ours.

Unsubscribing

Every email we send you has an unsubscribe link at the bottom. That covers the email series, vial plans, reminders and tool emails. One click stops all further email from us straight away, including any series email or vial reminder that has not gone out yet. No login or confirmation is needed. Spartan Peptides's emails and texts have their own opt-outs.

Getting a copy, or having it deleted

To ask for a copy of what we hold about you, or to have it deleted, use thecontact page or reply to any email we have sent you. Tell us the email address you used. Deleting your record also removes the log of emails we sent you and any reminder still scheduled. As above, it cannot remove what Spartan Peptides or Trakt already hold. Ask Spartan Peptides for that.

Changes to this policy

When what the site collects or shares changes, we update this page and the date at the top.