1. Who we are
Peptide Literacy Lab is an educational initiative of The Precision Firm LLC. It operates peptideliteracylab.com, a free educational website about evaluating peptide terminology, evidence, and public claims. In this policy, “we,” “us,” and “our” refer to The Precision Firm LLC and its Peptide Literacy Lab initiative.
Privacy questions may be sent to hello@peptideliteracylab.com. Our mailing address is 30 N Gould St Ste R, Sheridan, WY 82801, United States.
2. What the site does
The public site provides a learning-path quiz, self-paced class, knowledge checks, an interactive workbook, and an education library. No public account, payment, or email address is required. Two approved reviewers may use a separate QA login.
3. Information involved
Public learning tools
Quiz answers are calculated in your browser and are not sent to us. Course completion and workbook entries are stored only in your browser’s local storage. We do not receive those entries. Do not put diagnoses, symptoms, medication lists, records, or other sensitive health information in the workbook.
Optional analytics
If you accept analytics cookies, Google Analytics 4 may receive page views, general device and browser information, referring pages, session statistics, and approximate location derived from an IP address. We send page paths without URL query strings and disable Google signals and ad-personalization signals in our tag. Google may also collect enhanced-measurement events if that setting is enabled in the Analytics property. We do not send workbook text or quiz answers to Google Analytics.
QA account data
The private QA area uses Clerk. If you are an approved reviewer, Clerk processes your email address, sign-in request, authentication status, session data, and related security information to send a magic link and keep the account secure. QA access is not a marketing subscription.
Optional email subscription
If you request the Peptide Evidence Brief, we collect your email address; the date and time of the request and confirmation; the page or feature where you subscribed; the version of the consent language shown to you; confirmation, unsubscribe, bounce, and complaint status; and any utm_source, utm_medium, utm_campaign, utm_content, or utm_term values in the signup-page URL. We do not attach quiz answers, workbook entries, class progress, or health information to the subscriber record.
If you consent to subscription email, our email service records delivery, bounce, complaint, unsubscribe, open, and link-click events. Peptide Literacy Lab and Precision Research use those events within their shared CRM to understand which educational topics are useful and to improve follow-up. We do not use them for cross-site advertising.
Signup requires a second confirmation in the inbox. Security controls use a keyed one-way representation of the address and network address for duplicate detection, suppression, and rate limiting. We do not store the raw network address in the email database. Our host may process it in ordinary request and security logs.
Messages and technical records
If you email us, we receive the address and information you include. Our hosting and security providers may process ordinary request data, such as IP address, request time, browser headers, and requested URL, to deliver and protect the site.
What we do not collect on the public site
- No public profiles, passwords, or payment details.
- No precise GPS location.
- No advertising or cross-site behavioral profile.
- No server copy of your workbook, quiz answers, or class progress.
4. How and why we use information
- Deliver, secure, troubleshoot, and maintain the site.
- Authenticate the two approved QA reviewers.
- Send requested confirmation, welcome, introductory, and Peptide Evidence Brief emails; keep evidence of consent; attribute signup sources; and enforce unsubscribe, complaint, and bounce suppression.
- Measure public-page use and improve lessons when you consent to analytics.
- Answer messages, correction requests, and privacy requests.
- Comply with legal obligations and protect our rights.
Where applicable law requires a legal basis, we rely on your consent for optional analytics and subscription email, our legitimate interests in operating and securing the service, performance of a requested service, and legal obligations. You can withdraw analytics consent through “Cookie preferences” in the footer and withdraw email consent through the unsubscribe link in every subscription email.
5. Cookies and browser storage
Necessary storage remembers your cookie choice, keeps local learning progress on your device, and supports the private QA login. Google Analytics does not load unless you accept it. We do not use advertising cookies. See the Cookie Policy for the current inventory and controls.
6. Service providers and disclosures
| Provider | Purpose | Policy |
|---|---|---|
| Vercel | Hosting, content delivery, and operational security | Vercel privacy policy |
| Google Analytics | Consent-based public-site measurement | Google privacy policy |
| Clerk | Approved-reviewer authentication and magic-link email | Clerk privacy policy |
| Elastic Email | Email delivery, inbox confirmation, and delivery, bounce, complaint, and suppression events | Elastic Email privacy policy |
We may also disclose information when required by law, to address fraud or security issues, or as part of a business reorganization with appropriate protections. We do not sell personal information. We do not share it for cross-context behavioral advertising or use it for targeted advertising.
7. Retention
- Local course and workbook data stays on your device until you clear it, clear site data, or your browser removes it.
- The cookie-consent choice expires after 180 days.
- Google Analytics user-level event data follows the retention setting in our Analytics property; aggregated reports may remain longer.
- QA authentication data remains while access is active or as needed for account security, then follows Clerk’s deletion and retention process.
- We generally keep email correspondence for up to 24 months after a matter closes, unless a longer period is required for legal reasons.
- An unconfirmed subscriber address is removed after 30 days. An active address remains until you unsubscribe or request deletion. Raw addresses for unsubscribed, complained, or hard-bounced records are removed after 24 months.
- Consent and preference audit events are kept for up to six years. Provider webhook metadata is kept for 90 days, duplicate-request keys for seven days, and rate-limit records for up to two days.
- After unsubscribe, complaint, or deletion, a keyed one-way hash is kept while the email program operates so the address cannot be silently subscribed again. It is not used to send email and cannot be reversed to recover the address without already possessing it.
- Hosting and security records follow provider plan settings and are not intentionally kept by us as a permanent visitor history.
8. Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or receive a copy of personal data, and to object to or withdraw consent for certain processing. California and Colorado residents may also ask about categories collected and disclosed and use an authorized agent where the law permits.
We do not sell or share personal information for behavioral advertising, so there is no sale or targeted-advertising opt-out to exercise. We recognize legally required universal opt-out signals for those activities if our practices change. Optional analytics remains off unless you affirmatively accept it.
Every subscription email includes unsubscribe and preference links. An unsubscribe is applied immediately in our system. The preferences link can also delete the active subscriber record and associated confirmation tokens. A restricted CRM/provider suppression entry, a minimal local suppression hash, and limited consent history remain solely to enforce the request and document compliance. You may also request access, correction, or deletion by email.
Email requests to hello@peptideliteracylab.com. We may need to verify your request. We aim to respond within the period required by applicable law, generally one month for EEA/UK requests and 45 days for covered U.S. state requests. EEA/UK users may complain to their local data-protection authority.
9. International processing
We and our providers primarily process data in the United States, and providers may process it in other countries. Where required, providers use safeguards such as adequacy decisions or standard contractual clauses. Internet traffic may also transit through multiple regions.
10. Children
This site is intended for adults and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child sent us personal information, contact us so we can address it.
11. Security
The site uses HTTPS, provider-managed security controls, limited QA access, signed or one-way-hashed email tokens, server-only provider credentials, rate limits, and data minimization. No method of storage or transmission is completely secure. Keeping learning entries in the browser avoids a central database of workbook content, but anyone with access to your device or browser profile may be able to see locally saved entries.
12. Changes and contact
We may update this policy as the service changes. We will post the new date here and use a prominent notice for material changes when appropriate.
The Precision Firm LLC
Peptide Literacy Lab
30 N Gould St Ste R
Sheridan, WY 82801
United States
hello@peptideliteracylab.com