The short version
VAL PEPTIDES runs Google Ads conversion tracking on this website so we can measure which marketing campaigns bring qualified research inquiries. That tracking loads a Google script (gtag.js) and may cause Google to set conversion-related cookies (e.g. _gcl_*) in your browser when you load our pages. We do not run our own advertising or analytics cookies, and we do not use this data to build advertising profiles.
We also store a small amount of data in your browser's local/session storage purely for functionality — remembering your cookie choice, and remembering that the inquiry pop-up has already been shown so it isn't repeated. Third-party services (fonts, imagery, and the Google script above) receive a request when you load a page; that request carries your IP address, as every HTTP request does.
A few third parties receive a request when you load a page because we load fonts and images from them (and, if you accept, the analytics/advertising providers above). That request carries your IP address, as every HTTP request does.
What we store on your device
| Type | Name | Purpose | Duration |
|---|---|---|---|
| Cookies | Google Ads cookies (_gcl_au, _gcl_aw) | Set by Google's conversion tracking (gtag.js) to measure ad-driven visits and conversions | Up to 90 days |
| Cookies | None set directly by this site* | — | — |
| localStorage | inn_consent | Remembers your cookie choice (Essential Only / Accept All) | Until cleared |
| localStorage | inn_welcome_ts | Remembers the inquiry pop-up was shown, so it isn't repeated | Until cleared |
| sessionStorage | inn_welcome_seen | Same as above, for the current browser session | Session |
* We do not set advertising or analytics cookies directly. Google's conversion-tracking script runs for all visitors (it does not depend on your cookie choice) and may set its own cookies as described above; you can block it with your browser settings or an ad-blocker.
You can verify this yourself: open your browser's developer tools, go to the Application (or Storage) tab, and load any page on this site.
Third parties that receive a request
| Service | What it does | What it receives |
|---|---|---|
| Google Fonts | Serves the Inter typeface | Your IP address and user agent |
| picsum.photos | Serves demonstration images | Your IP address and user agent |
| loremflickr.com | Fallback image host, only if the first one fails | Your IP address and user agent |
Before launch
Self-host the font files and serve imagery from your own domain. Both change is a one-line edit and removes every third-party request from this site. Then this table becomes empty and the policy becomes trivially true.
Server logs
Our web server records the IP address, the requested URL, the user agent and a timestamp for each request. These logs are used to investigate errors and abuse, and are deleted after [retention period]. [Placeholder — confirm with counsel] They are not linked to any inquiry you send.
Your controls
Because we set nothing, there is nothing to opt out of. If you want to block the third-party requests listed above, any content blocker will do it — the site degrades gracefully:
- Blocking Google Fonts falls back to your system typeface.
- Blocking the image hosts shows a labelled grey placeholder instead of a broken image.