The short version first

Privacy Policy

Short version. I collect as little as I can get away with. I use privacy-respecting analytics that do not track you across the internet. If you give me your email, I treat it like something you lent me. You can leave at any time and I delete your data on request.

Who runs this site

The Peptide File is operated by the pseudonymous author JoyBoy. The business entity behind the site handles all data processing. Questions go to hello@thepeptidefile.com.

What I collect

Analytics. I use Plausible Analytics, a privacy-respecting analytics tool that does not use cookies, does not collect personal data, does not build profiles, and does not share your data with third parties. Plausible collects aggregate data like page views, referring sites, country-level location, and device type. No individual is identifiable in the analytics data.

Email list. If you sign up for the newsletter, the 503A checklist, a visit-prep packet, or the Phase 2 waitlist, I collect your email address and the specific lead magnet or form you used. That is it. I do not collect your name unless you type it in. Email is stored with a reputable email service provider (ConvertKit or Beehiiv at the time of writing, with Resend for transactional delivery). These providers have their own privacy policies and standard security practices.

Contact emails. If you email me, I see your email address and your message. I keep the message as long as it seems useful for a reply or a followup. I do not add you to any list based on a cold email.

Web app (Phase 2, not yet live). When the web app at app.thepeptidefile.com launches, it will use Supabase for auth, database, and storage. Any data you enter into the app, including labs, journal entries, and bookmarks, is stored in a database with row-level security, meaning only you can see your own data. This privacy policy will be updated with web-app specifics before the app launches.

What I do not collect

No advertising cookies. This site does not run display advertising and does not participate in ad networks.
No affiliate tracking. This site does not participate in affiliate networks.
No cross-site tracking. I do not embed third-party trackers like Facebook Pixel or Google Analytics.
No health data from third parties. The site does not import lab data, wearable data, or any other personal health information without you entering it yourself.

How I use the data I do collect

To send you emails you asked for.
To deliver lead magnets you asked for.
To understand, in aggregate, which content readers find useful so I can write more of what works.
To reply to you when you email me.

What I never do with your data

I do not sell your email address. Not to anyone. Not ever.
I do not rent, trade, or share your email with vendors, clinics, affiliates, or anyone else.
I do not use your email for anything other than what you signed up for.
I do not build a profile of you or your health.

Your rights

You can unsubscribe from the email list at any time, with a single click in any email. You can email hello@thepeptidefile.com and ask me to delete your data. I will confirm the deletion within a reasonable time. If you are a California resident, a resident of the European Economic Area, or a resident of any other jurisdiction with privacy rights of access, correction, or deletion, those rights apply and you can exercise them by emailing me.

Cookies

The site itself does not set tracking cookies. WordPress may set a small number of functional cookies (for example, if you comment or log in as an admin). Plausible does not use cookies. Any future web-app features at app.thepeptidefile.com that require session cookies will be disclosed in an updated privacy policy before launch.

Security

I take reasonable precautions. The site runs on secured hosting with HTTPS. Email is stored with providers that use standard encryption in transit and at rest. The forthcoming web app will use Supabase’s row-level security, encrypted backups, and industry-standard practices. No system is perfectly secure. If I learn of a breach that affects your data, I will notify you promptly.

Children

This site is written for adults. I do not knowingly collect data from anyone under 18. If you are under 18, do not submit your email and do not attempt to create a web app account.

Changes to this policy

I will update this policy when I change how the site handles data, for example when the Phase 2 web app launches. Material changes will be announced by email to subscribers. The last-updated date at the bottom of the page is authoritative.

Last updated April 2026.