Privacy

Email address

To send your order confirmation, tracking, and the lot number of the material you were sent. If you joined a waitlist instead, it is so we can tell you when that item is released.

Shipping name and address

To ship the order, and to enforce the state restrictions that apply to some laboratory supplies.

Order contents

What you bought, at what price, against which lot. This is the fulfilment record, and it is the link between your order and the certificate for that lot.

Research-use acknowledgment

The exact text you agreed to, the timestamp, and the IP address it was submitted from. Intended use is a legal question about what a seller knew and recorded, so we record it. An order without this is not a defensible order.

Server request logs

Our hosting provider keeps ordinary request logs — IP address, user agent, time, path — for a short period, for reliability and abuse prevention.

That is the whole list. We do not collect a date of birth, a phone number, an institution, or a stated purpose of purchase, because none of them are needed to ship a box.

One edge case, stated because it is real: if our database is unreachable when you submit a waitlist address, the address is written to our server log instead so it can be reconciled later.

Two things are stored locally and never sent to us: your research-use acknowledgment, and your cart. Clearing your browser storage removes both, and the site will ask you to acknowledge again.

The acknowledgment becomes a record we hold only when you place an order — that is the point at which it is written to the order with a timestamp and an IP address. Before that it exists on your machine and nowhere else.

Payment is handled entirely by a third-party cryptocurrency payment processor. You pay them; we receive a signed callback naming our order code and confirming it settled.

We never receive and never store card numbers, bank details, exchange credentials, wallet seed phrases, or private keys. The only wallet address we ever handle is one you send us for a refund, and it is kept with that order’s record because a refund is an accounting entry that has to be traceable.

A cryptocurrency payment is also a permanent public record on the network it was made on. We did not create that record and we cannot edit or delete it. No privacy policy can change that, and one that implies otherwise is wrong.

We do not run third-party analytics, advertising pixels, session recorders, or cross-site trackers. There is no cookie banner on this site because there is nothing on it to consent to.

If that changes, it will be written here first, with a date. A change you can see beats one you have to find.

Three categories of processor, each receiving only what it needs to do its job:

• The payment processor — our order code, the amount, and a one-line description of the items. It does not receive your shipping address.
• The carrier — the name and address on the label, so it can deliver.
• Our hosting and database providers — they store the order record on our behalf, under contract, and use it for nothing else. We will name our current providers if you ask.

We do not sell personal information, we do not share it for advertising or cross-context behavioural advertising, and we have no data-broker relationships of any kind.

We respond to valid legal process when we receive it, and we will tell you if your records are the subject of one unless we are legally barred from telling you.

Order records

Seven years, including the research-use acknowledgment, for tax, accounting, and product-liability reasons.

Waitlist addresses

Until you ask to come off, or 24 months without activity, whichever comes first.

Refund addresses

Kept with the order record they belong to, as the trace for that refund.

Server logs

Our hosting provider's retention window, which is measured in days rather than years.

Email us from the address on the order and ask. We will send you a copy of everything we hold about you, or delete it, within 30 days. You do not need to cite a statute or live in a particular state — we answer the request either way.

Two honest limits:

• We cannot delete an order record we are still required to keep. While that retention window runs we can remove the marketing side of your data, but not the transaction record itself.
• We cannot delete a blockchain transaction. It is not ours to delete.

This site is not intended for anyone under 21, and we do not knowingly collect information from minors. If you believe a minor has given us information, email us and we will delete it.

The site runs over HTTPS. Order records live in a hosted database with access limited to the operator of this business. We hold no payment credentials at all, which is the single largest reduction in what a breach here could expose.

If there is ever a breach affecting your data, you will hear it from us within 72 hours of us confirming it, with what happened and what to do about it.

We may update this policy. The date at the top is when this version was published; material changes are dated rather than quietly edited.