Privacy Policy — PepsReview

This Privacy Policy explains how PepsReview ("we", "us", "our") collects, uses, and protects your personal information when you use our website at pepsreview.com. We are committed to transparency and to giving you control over your data.

Data We Collect

When you register an account and use PepsReview, we collect the following information:

Email address — Used for account verification, password recovery, and occasional service notifications.
Display name — The public name shown alongside your reviews. This does not have to be your real name.
Country — Used for regulatory context and to display relevant vendor pricing.
State or region — Optional, used for regulatory context where applicable.
Reviews and ratings — Any peptide reviews, vendor reviews, and criteria scores you submit are stored and displayed publicly on the site.
Account activity data — We log timestamps of reviews and account actions for moderation and security purposes.
Technical data — Standard server logs including IP address, browser type, and pages visited. This data is used for security, analytics, and site improvement.

We do not collect: payment information (we do not process payments), physical addresses, phone numbers, or government identification numbers.

How We Use Your Data

To create and manage your account.
To verify your email and prevent spam or fraudulent reviews.
To display your reviews and ratings publicly (under your chosen display name).
To send transactional emails (verification, welcome, account-related notices).
To monitor and moderate user-generated content for compliance with our guidelines.
To analyze site usage and improve our content and features.

We do not sell your personal data to third parties. We do not use your data for targeted advertising.

Cookies Used

PepsReview uses cookies for essential site functionality:

Session cookie — Maintains your login session. This is a first-party, essential cookie required for the site to function.
Language preference — Stored in the session to remember your selected language.
Theme preference — Stored in localStorage (not a cookie) to remember your light/dark mode preference.

We do not use third-party advertising cookies, tracking pixels, or analytics cookies that send data to third parties. Essential cookies do not require consent as they are necessary for the site to function.

Third-Party Services

We use the following third-party services to operate PepsReview:

Resend — Used for transactional email delivery (account verification, welcome emails). Your email address is passed to Resend solely for the purpose of sending these emails. Resend's privacy policy is available at resend.com/privacy.
Hosting provider — Our server hosting provider processes IP addresses and server log data as part of standard infrastructure operations.

We minimize the data shared with third parties and only share what is necessary for the specific service to function. We do not share your reviews, ratings, or display name with any third party.

Data Retention

Account data — Your account data is retained for as long as your account is active. If you request account deletion, we will delete your email, display name, country, and state within 30 days.
Reviews — Reviews you submit are published content. If you delete your account, your reviews may be retained and attributed to "Anonymous" (with your display name removed), as they form part of the site's public content and other users may rely on them.
Server logs — Technical server logs (IP addresses, browser data) are retained for up to 90 days for security purposes, then automatically deleted.
Email records — Transactional email delivery records from Resend are retained according to Resend's own retention policy.

Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Right of access — You can request a copy of the personal data we hold about you.
Right to correction — You can ask us to correct inaccurate or incomplete data.
Right to deletion — You can request that we delete your account and associated personal data (subject to the retention of public reviews as noted above).
Right to object — You can object to the processing of your data for specific purposes.
Right to data portability — You can request your data in a structured, machine-readable format.
Right to withdraw consent — Where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, contact us at privacy@pepsreview.com. We will respond to your request within 30 days.

Data Security

We take reasonable measures to protect your data, including encrypted password storage (hashed and salted), HTTPS for all connections, and restricted access to user data on the server side. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically. If we make material changes, we will notify registered users via email.

Contact

If you have questions about this Privacy Policy or your data, contact us at privacy@pepsreview.com.