Privacy policy.
1. About this update
The Cookies and Analytics & your choices sections below were rewritten and prepared August 15, 2026 to accurately describe the cookies this site sets, what our analytics tool collects, and the choices you have. They are pending review by legal counsel, like the rest of this page, and replace earlier placeholder language that described this content only as “not in force.” Nothing in this update should be read as counsel-approved or as altering your rights under any signed order documentation.
2. Data we collect
Transaction-critical data only: name, billing and shipping addresses, email, phone number, payment token references (we never store full card numbers), order history, and the research-use attestation and compliance documentation submitted for lab-account review.
We also collect information through the cookies described below, including anonymous analytics about how you use the site.
3. Cookies
We use a small number of first-party cookies to run the site and remember your choices. None of the cookies below are sold or used for third-party advertising.
Account & cart: a sign-in session cookie (_medusa_jwt, 7 days, not readable by page scripts) keeps you signed in; a cart cookie (_medusa_cart_id, 7 days, not readable by page scripts) remembers your cart between visits; and, during signup, a pending-signup cookie (1 day, not readable by page scripts) temporarily holds the name and phone you entered until your account is created after email verification.
Age and analytics consent: an age-confirmation cookie (vx_age21, 1 year) records that you confirmed you're 21 or older, so we don't ask again on return visits; an analytics-consent cookie (rg_analytics_consent, 1 year) records whether you allowed or declined optional analytics.
Site performance: a cache-partitioning cookie (1 day) helps our page cache serve the right content per visitor and does not identify you; a delivery-estimate cookie caches the shipping estimate for your location for a few days so we don't look it up on every page.
Referral & attribution: if you arrive through a referral link or marketing campaign, we set cookies (30 days) that record the referral code and campaign details so the right party is credited; these do not track you across other sites.
Analytics: if you allow optional analytics, our analytics provider, Segment, sets its own first-party cookies to recognize your browser across pages on this site. These are not set until you allow analytics, and are cleared if you decline or a browser privacy signal blocks analytics; see Analytics & your choices below.
4. Analytics & your choices
Optional analytics on this site is provided by Segment and measures anonymous page and product activity only, for example which pages you view and how you interact with product and checkout flows. It does not collect the values you type into forms, payment details, or other personal information, and every analytics event is tagged with an environment value (production on the live site) so we can distinguish live traffic from testing.
The first time you visit, once you confirm you're 21 or older at the age gate, you're asked whether to allow optional analytics. You can change that choice at any time using the “Analytics preferences” control in the site footer.
If your browser sends a Global Privacy Control or Do Not Track signal, we honor it: optional analytics stays off regardless of any earlier choice, and you won't be asked again while the signal is present.
5. Retention
Order and compliance records are retained for seven years to satisfy regulatory and audit requirements, then deleted or anonymized. Account profiles persist until you ask us to close the account. Cookie and analytics data are kept only for the durations described above; we do not maintain a separate long-term analytics history tied to your identity.
6. Your rights
You may request access to, correction of, or deletion of your personal account data and research-use attestation records at any time: email [email protected] from the address on the account. Requests are processed within 30 days. Records we are legally required to retain within their retention window are excluded from deletion, and our response will say so explicitly.
These pages are working drafts prepared for payment-processor underwriting review as of July 14, 2026 and have not been approved by operations or legal counsel. They are not live policy and do not constitute legal advice; signed order documentation governs where terms differ. Bracketed values are placeholders pending entity and venue mapping.
This site supplies research-use-only materials.
Access requires that you are 21 years of age or older. Products are for laboratory and research use only — not for human or veterinary use, consumption, or clinical application.