Privacy Policy
Last updated: September 16, 2026
Merit Verified operates the Merit Verified iOS app and this website — an informational directory of independent laboratory Certificates of Analysis for research-compound vendors. Short version: the native iOS app has no account, collects no personal data, and does not track you. The website uses privacy-first analytics and, where enabled, ad-retargeting pixels. If you type an email to watch a peptide, we store that address to send the alerts you asked for — see Information we collect and Tracking below.
Information we collect
Nothing from the native iOS app. The Merit Verified App Store app has no sign-in, contains no analytics or advertising SDKs, and does not collect, store, or transmit personal information about you. The only thing stored is a single on-device preference — your first-launch age confirmation — which stays on your device and is never sent to us. On the App Store, Merit Verified's privacy summary is "Data Not Collected."
Email watches (website). If you type an email on a peptide page and start a watch, we store that address, the peptide, and the triggers you chose (price drop, new top pick, new checkout code) so we can email you when the market moves. We send a confirmation link first — the watch stays off until you click it. This is not a newsletter. We do not use that address for advertising. You can stop a watch from the confirmation or alert email, or by emailing [email protected].
COA scans. If you upload a certificate on the website scanner, the file is sent to our API so we can read the printed fields and check them against the registry. We do not use the file for advertising.
Standard technical request data. When the app or website loads data from our API, our hosting/CDN provider (Cloudflare) automatically processes ordinary request information such as IP address and user-agent in order to deliver content and protect the service from abuse. This is used only for reliability and security, is not used to identify or profile you, and is handled under Cloudflare's privacy terms.
Privacy-first website analytics. This website (not the app) uses Cloudflare Web Analytics to count aggregate page views and referrers so we can see what's useful. It is cookieless — it sets no cookies, assigns no advertising identifier, does not fingerprint your device, and does not follow you across other sites. It produces anonymous, aggregate counts only, never an individual profile.
How we use information
We use the limited technical data above only to operate, secure, and improve the service. Email watches are used only to send the alerts you asked for. The native iOS app does not build user profiles, serve advertising, or track you across other apps. This website's use of advertising pixels is described in Tracking, below.
Tracking
The iOS app. We do not track you in the app. It contains no third-party trackers, no advertising identifier (IDFA), and no cross-app tracking. On the App Store, Merit Verified's privacy summary is "Data Not Collected."
This website. Unlike the app, this website may use advertising pixels — currently supporting Meta, Google Ads, and TikTok, where enabled — to show you relevant ads on those platforms after you've visited, and to measure whether an ad led to a visit. These pixels are provided directly by those platforms; each governs its own use of the data under its own privacy policy. We don't layer any additional profiling on top of what a pixel collects for that purpose, and we never sell your data. You can opt out at any time by enabling Do Not Track or Global Privacy Control in your browser — we honor both, and no pixel loads when either is set.
Sharing and selling
We do not sell, rent, or share personal information with third parties for marketing. The only parties that process data on our behalf are infrastructure providers (e.g., our hosting/CDN) strictly to run the service — and we disclose information if required by law.
Data retention
The native iOS app collects no personal data, so there is nothing for us to retain or delete on your behalf. Email watches are kept until you confirm and then until you stop the watch or ask us to delete the address. Standard server/CDN request logs are kept only briefly for security and then discarded under our provider's defaults.
Children
Merit Verified is intended for adults 18 and older and is not directed to children. An age confirmation is presented on first launch.
Not medical or commercial advice
Merit Verified is an informational verification directory. It is not a store, sells nothing, and provides no medical, dosing, or health advice.
Changes to this policy
We may update this policy from time to time; the "Last updated" date above will change.
Contact
Questions about this policy? Email [email protected].