Privacy
In short
Without your consent, Peptide Compass sets no cookies and measures nothing. Only if you choose “Accept” in the consent bar do we load Google Analytics. There are no fonts, videos or ad networks from third-party servers on the site. Otherwise, personal data only arises where it is technically unavoidable: when you load the site through our hosting provider and when you send us an email.
Controller per Art. 4 (7) GDPR
Online Monkeys LLC
1309 Coffeen Avenue STE 1200
Sheridan, WY 82801, USA
Sofia@onlinemonkeys.au
Hosting and server logs
The site is hosted on GitHub Pages, a service of GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA. Whenever you load a page, your browser transmits technically necessary data to GitHub's servers: your IP address, date and time, the requested address, the previously visited page and your browser's identifier.
GitHub processes this data to deliver the site and to fend off attacks. The legal basis is our legitimate interest in a secure, working website (Art. 6 (1) (f) GDPR). We have no access to these logs ourselves. The transfer to the USA relies on the EU-US Data Privacy Framework, under which GitHub is certified.
Google Analytics (only with consent)
If you consent, we use Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics sets cookies (_ga and _ga_XVN604P524, lifetime up to two years) and records which pages you visit, how long you stay and where you came from, plus details about your device, browser and approximate location. Google Analytics 4 does not store your IP address. We only see aggregated statistics and cannot identify you personally in them.
The legal basis is your consent (Art. 6 (1) (a) GDPR, Section 25 (1) TDDDG). Together with Google Analytics we load Google Tag Manager (also Google Ireland Limited), which manages the measurement codes on the site. It sets no cookies itself but transmits your IP address to Google when loading. Without consent, neither script is loaded at all. Google may also transfer data to Google LLC in the USA. This relies on the EU-US Data Privacy Framework, under which Google is certified.
You can withdraw your consent at any time via “Cookie settings” at the bottom of every page; the Google Analytics cookies are then deleted. We remember your decision locally in your browser (localStorage, entry “pk_consent”) so the bar does not appear on every visit. This is technically necessary (Section 25 (2) no. 2 TDDDG).
Cart optimizer
When you select products in the cart optimizer, your browser stores this selection locally on your device (localStorage). The selection is not transmitted to us or to third parties; it only makes sure the selection is still there on your next visit. This is strictly necessary for a function you requested (Section 25 (2) no. 2 TDDDG). You can clear the selection on the page at any time or delete it in your browser settings.
Links to vendors and affiliate programmes
Links to shops are labelled as ads. Some of them are affiliate links: they contain an identifier that tells the shop you came from Peptide Compass. If you buy there, we may receive a commission. By clicking, you leave our site, and from then on the shop's own privacy policy applies. We receive no data from the shops that would allow us to identify you personally.
Contact by email
When you write to us, we process your email address and the content of your message in order to reply (Art. 6 (1) (b) and (f) GDPR). We delete the data once your request is settled and no statutory retention obligations apply.
Your rights
You have the right of access to your stored data (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). An informal email to the address above is enough.
You can also lodge a complaint with a data protection supervisory authority, for example the authority where you live (Art. 77 GDPR).
Last updated: September 2026