ProtoPep

Privacy notice

What ProtoPep holds about you, why, and what you can do about it.

Who runs ProtoPep

The data controller is [CONTROLLER NAME]. Contact: [CONTACT EMAIL].

What we hold

  • A keyed hash of your email address. The key is kept apart from the database.
  • Your animal and code.
  • Your profile, in bands: age, sex, weight, height, training experience, years of compound use.
  • What you log: protocols, doses and dates, ratings, side effects, body measurements and blood results.
  • If you add a passkey, the public half of that key.
  • The time each of your records was added and last changed, and a log of those changes. The log does not record when you sign in, and it is removed when you delete your account.

This is health data. It is tied to your animal and code, so it is not anonymous.

What we do not hold

  • Your name, or an email address anyone could read.
  • Photos, files or free text.
  • Tracking or analytics from other companies. The site loads nothing from anywhere else.
  • Your IP address. A keyed hash of it is kept for up to a day to stop abuse of sign in, then removed.

Cookies

Three small cookies, none for tracking: one keeps you signed in, one remembers that you confirmed you are an adult, and one remembers light or dark mode.

Why we hold it

We rely on your explicit consent, given when you join. You can withdraw it at any time by deleting your account.

Who sees what

  • The public sees pooled figures only, and only for groups that reach each contributor's threshold. The default is 5.
  • Time is shown as days since a protocol began, never as calendar dates.
  • Contributor lists show your animal and code on charts you add to, unless you opt out. Someone could follow one animal across charts.
  • Sign in codes are sent from our own mail server, not through an email company. Your address passes through that server each time a code is sent. Signing in with a passkey sends no email.
  • The change log can be read only by the person who runs ProtoPep.
  • The person who runs ProtoPep can hold an account's data out of the pooled figures if it looks false. They see how much the account logged, not what.
  • A researcher can keep an animal for someone who has no account and enter data that person gives them. Nothing entered is pooled until the person has agreed, using a code the researcher hands them. With the same code they can get a copy of everything or have it all deleted.
  • If you choose to join a study, the researcher running it can read your individual records under your animal and code, and can take a copy. This happens only if you accept an invitation, after being shown what it means, and it stops when you leave. A copy already taken cannot be recalled.

Deleting your account

You choose one of two outcomes, and nobody else is told which:

  • Everything you logged is wiped, including from pooled figures.
  • Your entries move to a new animal and code with no link to you.

Getting a copy of your data

Settings has a button that downloads everything held about your account, raw and exactly as stored, in one file. You can use it as often as you need.

Your rights

[TO BE WRITTEN WITH A SOLICITOR]

This section will cover access, correction, erasure, complaints to the ICO and how to reach us.

Terms

The short version

  • ProtoPep is for adults aged 18 or over.
  • Nothing here is medical advice. It is a record of what people say they took and what they say happened.
  • All data is self reported and may be wrong.
  • Reported protocols are not recommendations.
  • No vendor names, sourcing, sales or advertising. Not from us and not from you.
  • Log only your own data, and log it truthfully.
  • By logging against a compound, protocol or stack you are saying that, as far as you know, the compound was what it claimed to be, at the purity stated, and that the dose you entered is the dose you took. Every figure on the site rests on that assumption and ProtoPep cannot check it.
  • Taking several compounds together can be dangerous without proper monitoring. Seeing a stack here is not a suggestion to take it.
  • The site refuses values that cannot be real, and data that looks false can be held out of the pooled figures.

The full terms

[TO BE WRITTEN WITH A SOLICITOR]