The short, honest privacy policy.
An email address, given to join a list. No ad trackers, no data resale, no card numbers, no accounts. That's the whole story - the sections below just spell it out.
1. What we collect
An email address - that is the only thing the site asks anyone for. Wholesale enquiries add whatever you type into the message, and a submitted test report adds the batch, lab, method, result and the report's public verification link. There are no accounts, no orders, and no shipping addresses, because ordering is not open. We don't build advertising profiles and we don't ask for data we don't need.
2. What we do with it
Exactly what you signed up for, and nothing else. A waitlist signup gets one email when ordering opens. A back-in-stock signup gets one email when that specific dosage is available. A wholesale enquiry gets a reply. A submitted test report gets an email when it is published. Every list is double opt-in, so nothing is sent until you confirm. We never sell, rent, or share your data with third parties for their own marketing.
3. Cookies and tracking
No advertising pixels, no tag managers, no session recorders, no cross-site trackers, and no analytics cookies. We do measure traffic and page speed using Vercel's cookieless analytics: it stores nothing on your device, identifies a visit by a short-lived hash that is discarded after 24 hours, and records only the page URL, referrer, coarse location, browser and device type. The only thing kept on your device is the currency preference that makes prices display correctly.
4. Payment data
Pepdor is pre-launch and collects no payments, so we hold no payment data at all - no card number, no bank account, no wallet address. This section will be updated with the accepted methods and what they record before ordering opens.
5. Sharing with providers
Four providers, all listed on the sub-processors page: an EU provider hosts the database in Germany, Resend delivers the emails, Vercel serves the site and measures traffic, and Cloudflare manages DNS, shields our API from attacks and forwards inbound mail. Your email address goes from your browser to our German server through Cloudflare's protective network - it never passes through the frontend host. Each may only use what it sees to perform its service, never for its own purposes.
6. Retention and deletion
Every email we send carries a one-click unsubscribe link, which removes you immediately. To erase everything else, email legal@pepdor.com and your details are deleted within 30 days. You can also request a copy of the data we hold about you. We keep a signup only for as long as the list it belongs to still exists.
7. Published test results
The Test Ledger is append-only, so published batch results and independent third-party reports stay online permanently - but they were never tied to your name publicly. Submitting a report is permission to publish that report, not your personal details.
8. Children
Pepdor supplies research materials to qualified adult buyers only. The site is not intended for anyone under the age of majority in their jurisdiction, and we do not knowingly collect their data.
9. Changes and contact
This policy will change when ordering opens, because taking payments and shipping parcels means collecting more than an email address. Until then it describes a site that collects nothing else. Privacy questions, data access, or deletion requests: legal@pepdor.com.
Looking for the terms? They're on the legal page. Data questions go to legal@pepdor.com. Research use only - not for human or veterinary use.