Privacy policy
This policy explains what PeptidesGrid (peptidesgrid.com) collects and why. We collect as little as we can. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). PeptidesGrid is run from Ontario, Canada; privacy questions go to our privacy contact through the contact form.
If you only browse
There are no ads, no analytics, no tracking pixels and no cookies for visitors. Fonts and scripts are served from our own server, so no third party sees your visit. Our web server keeps standard access logs (IP address, time, page requested, browser type) for up to 14 days to keep the site secure and working. If you pick a currency, that choice is saved in your own browser (local storage) and never sent to us.
If you post a report, response or dispute
- What you write and the order details you enter (order month, amount, payment method, peptides, destination country) are published once a moderator approves them. We may edit out personal details before publishing.
- Display name is optional and published if you give one.
- Email is optional for buyers and required for store responses and disputes. It is never published and is used only to contact you about your submission.
- Evidence files are seen only by moderators and are never published. Location data is removed from JPG, PNG and WebP photos when you upload them; PDFs are kept as uploaded.
- Abuse prevention: we store a one-way scrambled version (a salted hash) of your IP address, not the address itself, and your browser type, to limit spam and repeated posts.
- Store responses and disputes: the name and role you give are published with your statement.
What stores see: never your email, IP details or files. Your display name, order details and text are public, and may let the store recognize your order.
If you contact us
We keep your message and email to answer you and to keep a record of corrections, complaints and removal requests.
Where it is stored and who else sees it
Our server is in Iceland, with the hosting provider 1984 ehf; your information is stored there and is subject to Icelandic law as well as Canadian law. Cloudflare provides DNS for the domain and does not carry page traffic. We don't sell or rent personal information, and we don't share it with stores. We disclose information only when the law requires it: if a Canadian court orders us to identify a poster, we will comply and, where the law allows, tell you first.
How long we keep it
| Data | Kept for |
|---|---|
| Web server access logs (IP address, time, page, browser) | Up to 14 days |
| Report text, display name and order details | Published while the report is up. A report that is rejected or taken down is deleted 24 months later |
| Email and evidence files for a published report | While the report is published, then as above |
| Reports never published (pending or rejected) | Deleted 24 months after the decision |
| IP hash and browser type | Cleared after 12 months |
| Store disputes | Evidence deleted 24 months after the decision; the dispute is kept only while its public statement is shown |
| Contact messages | Deleted 24 months after we close them |
| Anything under an open complaint or legal claim | Kept until it is closed |
| Server backups | 14 days |
A daily job applies these limits. 24 months matches Ontario's basic two-year limitation period, so a published report can still be defended if it is challenged.
Why we can use it
We rely on your consent to publish what you post, and on our legitimate interest in preventing abuse for the IP hash and access logs. You must be 18 or older to post.
Your rights
You can ask what we hold about you, ask us to correct it, or ask us to delete your submission, email and evidence, through the contact form. We answer within 30 days. If you are not satisfied, you can complain to the Office of the Privacy Commissioner of Canada. If a breach puts your information at real risk, we will tell you and the Privacy Commissioner.
Moderators
Moderators sign in with a password; that sets one secure session cookie on their browser only. Visitors never get a cookie from us.
Last updated Sep 25, 2026.