Valyria Peptides / policies
Cookie policy and preferences
Essential storage, security services and your controls.
Version 2026-09-14.1 · Effective
Published policy. Company and operating details marked “TO BE CONFIRMED” must be completed before commercial launch.
What is active
The storefront currently enables essential functionality only. There are no application analytics, advertising pixels or cross-site marketing trackers. Account and cart cookies are used when you request those functions. Optional analytics and marketing remain disabled; the preferences control records that essential-only choice and provides a place to review it. We will obtain any legally required consent before introducing non-essential storage, with equally accessible rejection and withdrawal.
Application inventory
__Host-valyria_cart: opaque cart identifier, Secure/HttpOnly/SameSite=Lax, up to 30 days. __Host-valyria_customer: separate customer authentication, Secure/HttpOnly, up to 30 days with seven-day inactivity expiry. __Host-valyria_admin: operations authentication, Secure/HttpOnly, up to 12 hours with 30-minute inactivity expiry. valyria-research-access in sessionStorage: the accepted research access version, until the tab session ends. valyria-cookie-preferences in localStorage: essential-only preference and notice version, valid in the interface for 180 days; clear it through browser storage controls at any time. These identifiers are not payment credentials.
Cloudflare security and external services
Cloudflare may set security/challenge cookies such as cf_clearance where its checks require them. Their issuance and lifetime depend on the challenge configuration; they are not application marketing consent. Bot Fight Mode and AI Labyrinth are enabled at the edge. External payment or document destinations may apply their own notices after navigation; we do not load them as optional embedded trackers. Re-audit provider cookies whenever edge or payment configuration changes.
Managing your choice
Open Cookie preferences from the footer or this page. Essential functions cannot operate reliably if you block their storage: signing in and preserving a cart may stop working. Browser tools can delete cookies/local storage and close the tab to reset research access. Marketing-email consent is managed separately through Email preferences. Refusing optional tracking never prevents access to policies or the catalog.