Privacy policy.

Effective November 6, 2026

BioHackStock operates biohackstock.com from Orlando, Florida. For questions about this policy or your information, contact b.hack.hub@gmail.com.

Information you provide

An order request includes your name, email, phone number, shipping address, product selections, quantities, and optional delivery notes. We keep request details, order and payment status, shipping information, and related communications to handle your request. Please do not include card numbers, medical histories, or other sensitive information in delivery notes.

The website does not collect card numbers or take online payments. Payment is arranged separately after we contact you. Any payment service used for a purchase has its own privacy practices, which you should review before paying.

How information is used

We use information to respond to requests, confirm availability and payment arrangements, arrange shipment, provide customer service, maintain business records, and protect the website. An order request does not subscribe you to marketing.

If email subscriptions are available and you separately choose and confirm a subscription, we keep your email address and consent records to send the requested news and offers. Marketing messages include an unsubscribe option. Necessary communications about an order are separate from marketing.

Hosting, storage, and service providers

Cloudflare hosts the website and its database and protects access to the owner dashboard. Google Drive stores product-photo originals in the owner's connected account. Email delivery, when activated, uses Resend for subscription confirmation, campaign delivery, and subscriber preferences. Delivery carriers and any separately selected payment service receive the information needed to fulfill their roles.

Authorized people and providers may process information to operate, maintain, and support these services. Information may also be disclosed when required by law or to address fraud, security incidents, or legal claims. This website does not include advertising pixels or use Google account data for advertising or AI-model training.

Browser storage and security

Your browser saves bag selections in local storage so they remain available when you return. You can clear this information through your browser's site-data settings. Hosting and security services process technical request information, including IP addresses. The website uses short-lived counters derived from IP addresses to limit repeated submissions. Authentication and Google connection flows use essential cookies.

We use HTTPS, restricted owner access, and encryption for the stored Google connection token. No website or transmission method can guarantee absolute security.

Owner Google Drive connection

The Google connection is for the store owner, not shoppers. It requests the owner's Google email identity and access only to specific Drive files created or selected for use with this app. It does not request access to the entire Drive or Gmail mailbox.

The app creates a BioHackStock — Product Photos folder in the owner's Drive. Uploaded originals stay in that folder. The website stores file identifiers, photo metadata, and an encrypted connection token so the owner can upload and manage product photos through the dashboard.

Photos attached to active product listings are visible to website visitors. Unassigned library photos require owner authentication. Removing a photo from a product keeps its original in Drive. Previously published photos may remain in browser caches briefly.

Google account information is used only to provide this photo connection, consistent with the Google API Services User Data Policy, including its Limited Use requirements. The owner can revoke access in Google Account connections. Revoking access stops future authorized access; it does not automatically delete originals or information already stored. Contact b.hack.hub@gmail.com for assistance removing website records, and manage originals in the owner's Drive.

Retention and your choices

Order and customer-service records are kept for handling requests, business recordkeeping, and resolving disputes. They are not automatically erased when a request is completed or cancelled. Subscription records may be retained to document consent and honor opt-outs. Photo originals remain in the owner's Drive until removed there.

Contact b.hack.hub@gmail.com to request access, correction, or deletion of your information or ask about retention. We review requests, may need to verify your identity, and may retain records where applicable requirements permit or require it. Removing active records may not immediately remove copies from existing backups. Rights available to you depend on applicable law.

The website is intended for adults and does not knowingly solicit information from children under 13. Contact us if you believe a child has provided personal information so we can review and address it.

Changes and contact

We will post changes here with an updated effective date and give additional notice where required. For privacy questions, contact b.hack.hub@gmail.com.