Cookies
We use optional cookies for analytics and advertising measurement only if you allow them. Necessary cookies keep you signed in. Privacy Notice
Choose which optional cookies we may use. You can change this at any time with “Cookie settings” at the bottom of every page.
Last updated: October 11, 2026. This notice describes what TRACEGROVE LABS ("we", "us") collects when you access this restricted site.
This site is operated by Tracegrove Labs LLC. For privacy questions, contact us at info@tracegrovelabs.com or via the contact form at /contact/.
Anyone can browse this site without an account. To request availability you sign in with one of the options shown on the sign-in page.
Google. We use Google Sign-In (OAuth 2.0 / OpenID Connect) with the basic scope
openid email profile only. Through that sign-in we receive from Google your verified email
address, your name, and your basic Google profile (including your Google account identifier). We never
receive or store your Google password, and we do not request or access your Gmail, Google Drive,
Google Contacts, or any other Google service or data.
Microsoft, Facebook or X (when offered on the sign-in page). We request only each provider’s basic sign-in permissions and receive your verified email address, your name where the provider shares it, and your account identifier with that provider. We never see your password for that provider and do not access your posts, contacts, files, inbox or any other data held by it.
Email and password. If you create an account with an email address and password, we store your email address (to identify your account and to send you account emails), a one-way, salted hash of your password made with the Argon2id algorithm (never the password itself), whether and when you confirmed your address, and when the password was last changed. To confirm your address and to reset a password we email you a link that works once and expires (24 hours for confirmation, 30 minutes for a reset); only a one-way hash of each link is stored. These account emails are sent from info@tracegrovelabs.com through Google Workspace (Gmail). To protect accounts we also keep short-lived counters of sign-in attempts per email address and per network; the network is stored only as a keyed, one-way code, never as an IP address.
Whatever option you use, accounts are linked only by the same verified email address. Signing in confirms that you control an email address or sign-in account. It is not a verification of any professional license, qualification, or credential. The qualification and research-use statements you accept at sign-in are your own self-attestations.
So the site owner can see who is using the site and what they look at, we record, linked to your signed-in account:
/products/bpc-157/);In these records we do not collect or store your IP address, device or browser fingerprint, precise location, query-string parameters (other than the campaign tags described below), form inputs, or any health information. The optional analytics and advertising tools described in section 5 run only if you allow them.
Research-use confirmation and availability requests. Before your first availability request we
ask you to confirm that you are at least 21, that materials are for laboratory research only (not for human or animal
consumption), and that you accept the Terms. We record that confirmation (its version and the date) for your account,
keyed by a one-way hash of your email. If you confirm before signing in, we instead store a random identifier in a
first-party cookie (tg_ruo) and in your browser’s local storage for 90 days, with a record of the
confirmation under that identifier; it is linked to your account when you sign in. When you request availability we
record your account email, the compound and the time, so we can reply.
If you use the contact form, we receive the details you enter (name, email address, organization and message). Form submissions are processed and stored by our hosting provider, Netlify, and are used only to respond to you.
To understand which pages are useful and where visitors leave, our server keeps anonymous,
cookie-free statistics for each page request, whether or not you are signed in: the page path,
the referring website's domain (not the full address), campaign tags in the link
(utm_source, utm_medium, utm_campaign), a device class
(desktop, mobile, tablet or automated), the country derived by our hosting provider, the date and
time, whether the visitor was signed in, and a random-looking visitor code that is a one-way,
keyed hash of the connection and browser type. That code changes every day, cannot be reversed
into an IP address, and is not linked to your account, email or name. We do not store your IP
address or full browser string, and no script runs in your browser for this. These records are
deleted after 30 days.
The information in sections 2 to 3a is used only to operate and secure the site, to send you account emails, and to let the site owner understand site usage. It is visible only to the site owner and authorised operators. We do not sell personal information, we do not give your email address or name to advertisers, and we do not publish any visitor profiles. If you allow marketing cookies (section 5), the advertising platforms listed there receive information about your visit to measure our ads, as described below.
Service providers that process data for us: Netlify (hosting, site storage and the contact form), Google (Google sign-in, and sending account emails through Google Workspace), and the sign-in provider you choose (Microsoft, Meta for Facebook, or X). The optional analytics and advertising providers are listed in section 5.
Necessary cookies (always on). We set a small number of strictly necessary cookies to keep you
signed in and to protect the sign-in process (an HttpOnly, Secure session cookie, short-lived
sign-in cookies, a cookie that remembers which version of the Terms you accepted on this browser, so you are not shown
the checkboxes again, and a cookie that remembers your cookie choices for 12 months).
Optional cookies (only with your permission). When you first visit, a banner lets you Accept all, Reject all, or make Choices. Until you accept, optional cookies stay off: Google tags run in a restricted mode that sets no analytics or advertising cookies (Google Consent Mode), and the Meta, Microsoft Clarity and X tags are not loaded at all. You can change your choice at any time with the Cookie settings link at the bottom of every page.
The Choices panel always lists exactly the tools in use at the time.
When allowed, these providers receive the page address (without its query string), the referring page, device and browser details, your IP address (which they process on their own systems), identifiers stored in their cookies, and simple events such as “signed up” or “signed in” with the sign-in method. We never send them your email address, name or any other account details. Each provider handles that information under its own privacy policy, and some combine it with what they already know about you, for example to measure ads.
Page-view records are automatically deleted after 30 days. Availability requests are kept, like contact-form messages, until you ask us to delete them. A research-use confirmation made without an account is remembered on your browser for 90 days. Your session cookie expires after 90 days without a visit (each visit extends it), and you can sign out at any time. A record that your account accepted the Terms and research-use attestation (the version and the date, keyed by a one-way hash of your email) is kept so that you are not asked again. An email and password account is kept until you ask us to delete it; an account whose address is never confirmed is deleted after 7 days. Sign-in attempt counters are kept for at most one day. Your cookie choice is remembered for 12 months.
You can sign out at any time, and you can withdraw access by not signing in. You can turn optional cookies on or off at any time with Cookie settings at the bottom of every page, and you can also block cookies in your browser.
To delete the data we hold about you, email info@tracegrovelabs.com from the address you sign in with (subject “Delete my data”), or use the contact form at /contact/ and choose “Privacy request”. We delete your account record, any email and password credentials, your Terms acceptance and research-use confirmation records, your availability requests and your page-view records, and confirm by email, within 30 days. If you signed in with Facebook, you can also remove Tracegrove Labs from your Facebook settings (Settings & privacy → Settings → Apps and websites); that stops Facebook sharing data with us, and your email to us removes what we already hold. Anonymous traffic statistics (section 3a) are not linked to you and are deleted automatically after 30 days.
This site provides information about research materials. Nothing here is a medical claim, and nothing here has been evaluated by any medical or food-and-drug regulator. Materials referenced are for in-vitro / laboratory research use only and are not for human, clinical, diagnostic, or veterinary use.
We may update this notice; the "last updated" date will change accordingly.