Privacy

The short version

No accounts and no advertising trackers. Three things on this site record personal data: an order, the vial check and the message form in the help centre. The cart is kept in your own browser until you order, and one cookie remembers the language you chose.

When you place an order

We record your name, email address, phone number, delivery address, what you ordered, and the IP address the order came from. This is what we need to take payment, ship the parcel and answer questions about it.

The delivery details go to the warehouse and the courier that handle the parcel, and nowhere else. Card details are entered on the Stripe page and never reach us. If you pay with crypto, your name and email go to Payerurl, the provider that processes the payment.

Order records are kept for as long as tax and accounting rules require.

When you check a code

We record the code you entered, whether it was one of ours, the time, your IP address and your browser’s user-agent string. The first successful check of a code also stores the IP it came from.

These records are what the check runs on, not analytics. The count of previous lookups is what tells a buyer whether a code has been used before, and the IP log is how we spot attempts to work through codes at random.

We keep them for as long as the batch is in circulation, since questions about a vial can arrive long after it was sold.

When you check a seller

Nothing is stored. The domain is compared against our list and the answer returned. There is no log of seller lookups.

When you write to us

We receive the name, email address, subject and message you send, plus the IP address the message came from, so we can reply and so the form cannot be used to flood us.

The address is used to answer you. It does not go onto a mailing list and is not passed to sellers or anyone else.

Visit counting

We count page views and additions to the cart on our own server. A visitor is recorded as a one-way hash of the IP address, the browser and the date, so the record cannot be traced back to an address and a visitor cannot be followed from one day to the next. No cookies are set for this.

What we do not do

No advertising pixels, no third-party analytics, no profiling, no sale of data. Fonts are served from our own server; apart from the payment pages you choose to open, nothing on these pages calls out to another company.

Your rights

You can ask what we hold about you, ask for it to be corrected or ask us to delete it. We will, unless the record is needed for accounting or to answer an authenticity question about a vial. Write through the help centre.