Privacy Policy

We collect account information (email, authentication identifiers), order history, age verification audit events, and technical data such as browser user agent for compliance logging.

Payment card data is processed directly by Stripe and is never stored on TPT Peptides servers.

Information is used to fulfill orders, maintain account security, enforce age and research-use compliance, prevent fraud, and improve platform reliability.

Admin audit logs may record administrative actions for legal and operational compliance.

Customer and order data is stored in Google Firebase/Firestore with role-based access controls and server-side validation for sensitive operations.

We employ HTTPS encryption, secure session cookies, Firebase App Check (production), and Stripe PCI-compliant payment processing.

You may request access to or deletion of personal data subject to legal retention requirements for order and compliance records.

Contact us through your account portal to submit a data request.

We use Firebase (authentication, database), Stripe (payments), and Vercel (hosting). Each provider maintains its own privacy policy governing data they process.