Privacy policy

peptide rise stores account, address, cart, order, and payment-reference data needed to operate the store. Secrets and provider credentials are kept in server environment variables and are never exposed to the browser.

Passwords are hashed before storage. Payment records store provider references, amounts, statuses, and addresses returned by the payment provider, not wallet private keys.

Contact and email flows use a console adapter in local development. Replace it with a transactional email provider and update this policy before production launch.