Last updated: September 17, 2026
Consumer Health Data Privacy Notice
Washington's My Health My Data Act and Nevada's SB 370 require any site that handles "consumer health data" to publish a notice like this one, separately from its general privacy policy. This is that notice. It applies to everyone, not only residents of those states, because it is simpler to treat everybody the same way. Our general Privacy notice covers everything else.
The short version: PepRecon has no accounts, no advertising, no analytics, and no tracking of any kind. The calculators run inside your browser and send nothing anywhere. We have never sold data and we never will. The only health-related information we hold is what you deliberately chose to save, and in almost every case it is a set of numbers with no name attached to it.
What counts as consumer health data
These laws define the term broadly. It covers information linked to you that identifies your past, present, or future physical or mental health, and it explicitly reaches things like bodily functions, use of a medication, and efforts to research or obtain health services or supplies. Read literally, a dose you type into a calculator or a compound page you read could fall inside that definition.
The important qualifier is "linked or reasonably linkable to a consumer." Data that cannot be connected back to a person is outside the definition. Most of what PepRecon handles is outside it for exactly that reason, and the sections below explain where that is and is not true.
What we collect, and when
- Nothing, by default. Every calculator on the site computes in your browser. Vial sizes, doses, concentrations, titration schedules, and body-map entries stay on your device and are never transmitted. Closing the tab ends it.
- Share links, only when you click. If you press Save or Share, the values in that tool are sent to our server and stored under a random link ID so the link can reproduce the result. For most tools this is only numbers. For Plan and Rotate a share link can contain a titration schedule or an injection-site log. A share link carries no name, no email, no account, and no device identifier. We do not attempt to connect one to a person, and we have no practical way to do so.
- COA Reader uploads, only when you upload. A certificate you submit is sent to Anthropic to read the printed text, and the file plus the extracted fields are stored so the shareable result keeps working. These are lab documents about a product, not about you.
- Server logs. Our server records ordinary request information: IP address, timestamp, and browser user-agent. This is the one place where a technical identifier sits next to a record of which page was requested, so we treat it as in scope even though we never use it that way. It exists to keep the site running, diagnose faults, and stop abuse, and it is never used to build a profile or to infer anything about anyone's health.
- Local storage on your device. Some tools remember your own entries, and the site remembers your light or dark theme choice, in your browser's local storage. That never reaches us and you can clear it at any time through your browser.
Where the data comes from
Only from you, and only through your browser: what you type and choose to save, what you upload, and the technical details your browser sends with any web request. We do not buy data, receive it from data brokers, obtain it from advertising networks, or combine it with anything from another source.
Why we hold it
To provide the specific feature you asked for (making a share link work, producing a COA result), to operate and secure the site, to diagnose faults, and to prevent abuse. Nothing is collected for advertising, marketing, profiling, measurement, or resale, because none of those things happen here.
We do not sell it
We have never sold consumer health data, we do not sell it now, and we do not share it for cross-context behavioral advertising. No sale means we do not need, and will never ask you for, the written authorization these laws require for a sale. There is no advertising on this site and no advertising or analytics technology embedded in any page.
No geofencing
We do not operate a geofence around any health care facility, pharmacy, or any other location, and we do not use precise location data for anything. We do not collect precise location at all.
Who else can see it
We keep this list as short as we can. In full, it is:
- Amazon Web Services (hosting). Our server and database run on AWS infrastructure, so AWS processes traffic and stores data on our behalf as our service provider.
- Anthropic (COA Reader only). A certificate you upload is sent to Anthropic's service to extract the printed text. Nothing else on the site is sent there.
That is the complete list. There are no advertising partners, no analytics providers, no marketing platforms, no data brokers, and no affiliates. As of September 2026 the site loads no third-party resources at all: fonts are served from our own domain specifically so that no outside company sees your IP address when you read a page.
We may also disclose information if we are legally required to, or where necessary to protect the security of the site, and we would limit any such disclosure to what is actually required.
How long we keep it
Share links and COA results are kept for as long as the link is meant to work, which means indefinitely unless you ask us to remove one. Server logs rotate and are overwritten in the normal course of operating the server. If you want something gone, ask and it will be deleted.
Your rights
Wherever you live, you may ask us to:
- Confirm whether we hold any consumer health data relating to you, and see it;
- Get a list of every third party we have shared it with, and their contact details;
- Delete it, including from backups and from our service providers' systems;
- Withdraw consent to our collection or sharing of it.
We will not discriminate against you, or degrade the site for you, because you exercised any of these rights. There is nothing to degrade: the tools do not know who you are.
How to make a request
Email us. Because there are no accounts, we cannot look you up by name, so include the share link or COA link you want removed. That link is the only thing that identifies the record.
We will respond within 45 days. If a request is genuinely complicated we may extend that once by a further 45 days and will tell you why before the first 45 days are up. In practice a deletion request is usually done the same week.
We only need to verify a request to the extent of confirming that you hold the link in question. We will not ask you to create an account or hand over identity documents to exercise a right.
If we say no
If we decline a request, we will tell you why. You may appeal by replying to that message and saying you want the decision reviewed. We will review it and give you a written answer within 45 days. If the appeal is denied, you may contact the Washington State Attorney General at atg.wa.gov/file-complaint, the Nevada Attorney General, or the equivalent authority where you live.
Employees and contractors
PepRecon is run by one person, who is the only one with access to the server and its data. There are no employees and no contractors with access.
Changes to this notice
If our practices change, we will update this page and the date at the top. If a change is significant we will note it in the changelog.
Contact
Requests and questions about this notice: email us.