Skip to main content

Privacy Policy

Privacy Policy

Privacy practices for Pep Pal, including waitlist submissions, analytics, cookies, affiliate tracking, and your rights under California and EU/UK privacy frameworks.

Effective Date

March 30, 2026

Last Updated

March 30, 2026

Contact Email

garret@peppal.app

Applies To

https://www.peppal.app

Overview

Pep Pal ("we," "us," or "our") operates https://www.peppal.app (the "Site"). This Privacy Policy explains how we collect, use, disclose, and protect information when you visit the Site. It is drafted to comply with the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), the California Online Privacy Protection Act (CalOPPA), and applicable provisions of the General Data Protection Regulation (GDPR) for visitors from the European Economic Area and the United Kingdom.

By using the Site, you acknowledge that you have read and understood this policy.

1. Who We Are

Pep Pal is a peptide calculator, planning, and educational content platform. The Site includes a free calculator, product waitlist capture, supplier research content, blog content, and related informational pages. We do not sell peptides or other products directly.

Calculator inputs are processed in your browser. Unless you voluntarily submit information through the waitlist or contact us directly, we do not receive the calculation values you enter.

Contact Information:
Email: garret@peppal.app
Website: https://www.peppal.app

2. Information We Collect

We collect information in two ways: information you provide directly, and information collected automatically when you visit the Site.

2a. Information You Provide

  • Waitlist information — Your email address if you join the Pep Pal waitlist.
  • Communications — The content of messages you send us by email or through future support channels.

We do not collect payment information through the Site. We do not currently require an account to use the calculator.

2b. Information Collected Automatically

  • Usage data — Pages visited, time on page, referring URL, exit pages, and navigation paths.
  • Device and browser data — Browser type and version, operating system, screen resolution, and device type.
  • Approximate location — Country and region-level location inferred from IP address. We do not collect precise geolocation.
  • IP address — Collected transiently by our hosting infrastructure and analytics providers.
  • Cookies and similar identifiers — Used by analytics and infrastructure providers. See Section 4.

2c. Calculator Data

The public calculator is designed so that the dose, vial, and water values you enter remain in your browser session for use in the calculation interface. We do not intentionally transmit those calculator inputs to our servers unless you separately submit information through a form or other feature that clearly requests submission.

2d. Information We Do Not Collect

  • Social Security numbers or government-issued ID numbers
  • Financial account numbers or payment card data
  • Biometric data
  • Medical records or health information
  • Precise GPS-level location data
  • Personal information from anyone under 18 years of age

3. How We Use Information

We use the information we collect for the following purposes:

PurposeLegal Basis (GDPR)
Operating and improving the Site and calculator experienceLegitimate interest
Responding to waitlist submissions and inquiriesConsent / legitimate interest
Sending Pep Pal launch updates if you join the waitlistConsent
Analyzing site traffic and user behavior (via Google Analytics)Legitimate interest (with consent where required)
Affiliate attribution and referral trackingLegitimate interest
Complying with legal obligationsLegal obligation
Preventing fraud, abuse, and maintaining securityLegitimate interest / legal obligation

We do not use your information for automated decision-making or profiling that produces legal effects.

4. Cookies and Tracking Technologies

We use Google Analytics 4 and related website measurement technologies to understand aggregate site usage and improve the Site. These tools may use cookies or similar identifiers to recognize browsers or devices and measure events such as page views and visits.

We may also rely on standard technical cookies or local browser state where necessary to support interface behavior and site functionality.

If you click an affiliate or supplier link and leave this Site, the destination website may use its own cookies or tracking tools under its own privacy policy.

Do Not Track

Some browsers offer a "Do Not Track" signal. Because there is no consistent industry standard for responding to those signals, the Site does not currently respond differently based on a Do Not Track setting.

5. How We Share Information

We do not sell your personal information for monetary consideration. We may share information in limited circumstances.

5a. Service Providers

ProviderFunctionPrivacy Policy
Google LLCAnalytics (Google Analytics 4)https://policies.google.com/privacy
Vercel Inc. (or hosting provider)Website hosting and CDNhttps://vercel.com/legal/privacy-policy
Resend, Inc.Waitlist email deliveryhttps://resend.com/legal/privacy-policy

5b. Affiliate Partner Links

Pep Pal contains affiliate links to third-party peptide suppliers. When you click an affiliate link, including links containing the PEPPAL code or the ?ref=peppal tracking parameter, you are redirected to the supplier’s website. At that point, the supplier’s own privacy policy governs the collection and use of your data.

Affiliated suppliers include:

  • Orbitrex Peptides
  • Paradigm Peptides
  • Pivot Labs
  • Peptide Tech
  • Peptide Partners

5c. Legal Requirements

We may disclose information when required by law, court order, or government request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

5d. Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all assets, your information may be transferred as part of that transaction.

5e. What We Do Not Do

  • We do not sell personal information for monetary consideration.
  • We do not rent or trade email lists.
  • We do not share personal information for third-party direct marketing without your consent.

6. Affiliate Disclosure

Pep Pal participates in affiliate referral programs. We may earn a commission when you click a supplier link and complete a purchase. This compensation does not change our editorial approach or calculator functionality.

Our affiliate tracking commonly uses the referral code PEPPAL and/or the URL parameter ?ref=peppal. These identifiers attribute your visit to Pep Pal for commission purposes.

7. Data Retention

Data TypeRetention Period
Google Analytics data26 months (Google's default retention; configurable)
Waitlist submissions / email inquiriesUp to 3 years or until request for deletion
Server/hosting logs (IP addresses)Up to 90 days (provider default)
Affiliate click/referral dataDuration of affiliate program agreement

We retain data only as long as necessary for the purposes described in this policy or as required by law.

8. Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following rights:

  • Right to Know — Request categories and specific pieces of personal information we collected about you.
  • Right to Delete — Request deletion of your personal information, subject to legal exceptions.
  • Right to Correct — Request correction of inaccurate personal information we hold about you.
  • Right to Opt-Out of Sharing — Opt out of analytics-related data sharing as broadly defined by CPRA where applicable.
  • Right to Non-Discrimination — We will not discriminate against you for exercising your privacy rights.

Shine the Light (Cal. Civ. Code § 1798.83): California residents may request a list of third parties to whom we have disclosed personal information for direct marketing purposes during the preceding calendar year. We do not disclose personal information to third parties for their own direct marketing purposes.

To exercise your rights, email garret@peppal.app with the subject line "California Privacy Rights Request".

9. Rights for EEA/UK Visitors (GDPR)

  • Right of Access — Request a copy of the personal data we hold about you.
  • Right to Rectification — Request correction of inaccurate data.
  • Right to Erasure — Request deletion of your personal data where there is no legitimate reason to continue processing.
  • Right to Restriction of Processing — Request restriction of processing in certain circumstances.
  • Right to Data Portability — Receive your data in a structured, machine-readable format.
  • Right to Object — Object to processing based on legitimate interests.
  • Right to Withdraw Consent — Withdraw consent at any time where processing is based on consent.

To exercise your GDPR rights, email garret@peppal.app. We will respond within 30 days.

10. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include HTTPS encryption for data in transit, access controls, and secure hosting infrastructure.

No method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

11. Children's Privacy

The Site is intended solely for adults aged 18 and older. We do not knowingly collect personal information from anyone under the age of 18.

If you believe a child has provided us with personal information, please contact us at garret@peppal.app.

13. Calculator and Tool Disclaimer

Pep Pal is provided for organizational and informational purposes only. The Site does not provide medical advice, diagnosis, treatment recommendations, or individualized health guidance.

We do not ask you to submit medical records or protected health information to use the calculator. If you choose to contact us, please avoid sending sensitive medical information.

14. Changes to This Policy

We reserve the right to update this Privacy Policy at any time.

  • We will update the "Last Updated" date at the top of this policy.
  • We will post a prominent notice on the Site following material changes where appropriate.
  • Where required by law, we will notify you directly.

15. Contact Us

For privacy-related questions, rights requests, or complaints, contact us at:

Pep Pal
Email: garret@peppal.app
Website: https://www.peppal.app/privacy-policy

We aim to respond to privacy inquiries within 10 business days.