Privacy Policy

This Privacy Policy explains how AxonPeps Research LLC (“AxonPeps”, “we”) collects, uses, and shares information when you visit axonpeps.us or place an order. We serve customers in the United States only, and the Website is not directed to anyone under 21.

Information we collect

• Account details: your name, email address, and password. Passwords are stored only in hashed form by our authentication provider; we never see them.
• Terms acceptance records: when you accept our Terms we record the date and time, your IP address, your browser's user agent, and the version and content hash of the text you accepted, as evidence of our agreement.
• Shipping address: every order requires a shipping address in one of the 50 U.S. states or the District of Columbia: recipient name, street address, optional apartment or suite, city, state, and ZIP code. We do not collect a phone number. If you choose “Save to my address book”, we also keep that address, and any label you give it, in your account for future orders.
• Orders: the items, amounts, status, carrier, and tracking number of each order.
• Payments: orders are paid in Bitcoin through a payment server we operate ourselves. We receive the payment amount and transaction details; we never receive or hold your wallet's private keys. Bitcoin transactions are recorded permanently on the public blockchain, which is outside our control.
• Messages: anything you send through our contact form, including your name and email address.
• Past newsletter sign-ups: if you joined our former newsletter list, your email address. We no longer run a newsletter.
• Usage data: pages viewed, device and browser type, approximate location derived from your IP address, and referral source, collected through Google Analytics.
• Browser storage: your cart and your age and research-use confirmation are kept in your browser's local storage, and sign-in uses cookies from our authentication provider.

How we use it

• To create and secure your account, and to process and fulfil orders
• To send order confirmations, shipping updates, and account emails
• To ship your order, to show you where it is going in your order emails, and to keep shipping records; we use the destination state to meet sales-tax obligations
• To answer your messages
• To keep records of your agreement to our Terms and of orders, as required for legal, tax, and accounting purposes
• To understand how the Website is used, and to prevent fraud and abuse

We do not send marketing email, and we do not sell or rent your personal information.

Who we share it with

We share information only with the service providers that operate the Website for us, and only as needed for the service each provides:

• Supabase: database and account authentication
• Vercel: website hosting
• Resend: delivery of order and account emails. Order confirmation and shipping emails include your shipping address, and Resend keeps copies of sent emails for up to 30 days.
• Google: Google Analytics, and the email inbox our team uses to answer messages
• Discord: private staff channels that notify our team of new orders (items and totals), new accounts, Terms acceptances (including the IP address recorded), backorders, and contact messages (including the message text). These notifications include the customer's name and email address.
• LunaNode: hosting for our payment server
• Shipping carriers: the name and address needed to deliver an order

Your shipping address is never sent to our Bitcoin payment server or its host (LunaNode), to Discord, or to Google Analytics.

We may also disclose information when the law requires it, to respond to lawful requests from public authorities, or to protect our rights and the safety of others.

Analytics and cookies

Google Analytics sets cookies to measure how the Website is used. You can block these cookies in your browser settings or with Google's opt-out browser add-on without affecting how the Website works. We do not use advertising or cross-site tracking pixels.

Retention

We keep the full shipping address on a shipped order for 2 years after it ships. After that we delete the recipient name and street lines and keep only the city, state, and ZIP code with the order record. On an order that never ships (expired or cancelled), we do the same 90 days after the order closes. Address-book entries stay until you delete them or your account is deleted.

We keep other order records and Terms acceptance records for as long as the law requires for legal, tax, and accounting purposes. We keep account details until you ask us to delete your account, and contact messages for as long as needed to resolve them. We may keep any record longer when the law requires it or to respond to a legal claim or investigation.

Your choices and rights

You may ask us to access, correct, or delete your personal information through our contact page. We will verify the request against your account before acting on it. You can delete saved addresses yourself at any time in your account dashboard. If we delete your account at your request, your address book is deleted with it; addresses on past orders are part of our order records and are reduced on the schedule above. Records we must keep by law, such as completed orders, may be retained after an account is deleted. Depending on the state you live in, you may have additional rights under state privacy law, and we will honour them where they apply.

Security

We use encryption in transit, access controls, and two-factor authentication for staff accounts. Shipping addresses are encrypted by our application (AES-256-GCM) before they are stored, with a key kept outside the database, and only our staff can view them to fulfil orders. No system is perfectly secure; if a breach affects your information, we will notify you as the law requires.

Changes and contact

We will post any change to this policy on this page with a new date. Questions about this policy: use our contact page. AxonPeps Research LLC, Stafford, Virginia.