Back to Peptify UK

    Peptify UK — Legal Document

    Cookie Policy

    Last updated: 19 April 2026

    1. What cookies are

    Cookies are small text files stored on your device when you visit a website. They let the site remember your actions and preferences over time (such as login, cart contents, or consent choices). Similar technologies (localStorage, sessionStorage, web beacons) serve comparable purposes and are covered by this policy.

    2. Our approach — Consent Mode v2

    We operate on a default-denied basis: all analytics and advertising cookies are blocked until you actively click Accept on our cookie banner. Only the cookies strictly necessary to make the Site work (keeping you logged in, remembering your cart) are set before you make a choice.

    You can change your mind at any time by clicking Cookie Settings in the Site footer, or by clearing your browser's site data for peptifyuk.com.

    3. Cookie categories

    3.1 Strictly necessary (always on)

    These cookies are essential and do not require consent under UK PECR.

    • Authentication (Supabase) — keeps you signed in.
    • Cart (localStorage) — remembers your basket between visits.
    • Consent record — remembers your cookie choices so we don't re-ask on every page.
    • CSRF tokens — protect against cross-site request forgery on forms.

    3.2 Analytics (consent required)

    Help us understand how the Site is used so we can improve it. Off unless you accept.

    • Google Analytics 4 (_ga, _ga_*) — traffic, user behaviour, conversions. IP is anonymised.

    3.3 Advertising (consent required)

    Help us measure and improve our marketing campaigns. Off unless you accept. Note: we do not show personalised advertisements on the Site itself — these cookies exclusively measure the effectiveness of ads shown on other platforms.

    • Meta Pixel (_fbp, _fbc) — measures Facebook and Instagram ad performance.
    • TikTok Pixel (_ttp, ttq_*) — measures TikTok ad performance.
    • Google Ads conversion tracking (_gcl_*) — measures Google Ads conversion performance.

    3.4 Third-party content

    Set by embedded third-party widgets:

    • Trustpilot — review widget, if you interact with it.
    • YouTube — if a video is embedded and you play it.

    4. Server-side tracking (Conversions API / Events API)

    Where you accept advertising cookies, we may additionally send a copy of your purchase event from our server to Meta and TikTok using their respective server-side APIs (Conversions API / Events API). All personal identifiers are SHA-256 hashed client-side before transmission; the raw email, phone, or name is never sent. Server-side events are deduplicated against client-side pixel events using a shared event ID so the same action is never counted twice.

    5. How to control cookies

    • Peptify banner: click Reject or Accept when you first visit, or Cookie Settings in the footer at any time.
    • Browser settings: most browsers let you block or delete cookies. See aboutcookies.org for step-by-step guides.
    • Opt-out from Google Analytics: install the GA Opt-out browser add-on.

    Blocking all cookies may break essential functionality such as staying signed in or completing checkout.

    6. Retention of cookies

    Cookie lifespans range from the duration of your browsing session (session cookies) up to 24 monthsfor some advertising cookies (for example Meta's _fbc). Consent records are refreshed every 12 months, after which we will ask again.

    7. Changes to this policy

    As we add, change, or remove tools, we will update this page. The "Last updated" date reflects the current version.

    8. Contact

    Email info@peptifyuk.com with any cookie questions, or see our Privacy Policy for broader data handling information.