Privacy policy.

1. Overview

Pioneer Labs USA LLC ("Pioneer Labs", "we", "us") operates this website as a supplier of research materials to qualified purchasers. Everything sold here is for laboratory research use only and is not intended for personal, household, recreational or consumer use. By using the site you confirm that you are at least 21 years old and are acting in a research capacity, not as a consumer.

This policy explains what information we collect when you visit the site, browse the catalog, create an account, or place and pay for an order; why we collect it; who else sees it; and the choices you have. It covers this website only. It describes how the site works today, and it is corrected in the same release as any change to what the site collects.

2. Information we collect

We collect only what is needed to run a research supply store:

• Contact and delivery details: your name, email address, telephone number, and billing and shipping address, given when you place an order or make an inquiry.
• Account information: your email address and an encrypted form of your password, held by our authentication provider so that you can sign in, reset your password and see your own orders. We never see the password itself.
• Order information: the items ordered, quantities, totals, the research purpose you select, the confirmations you give at checkout, the payment method you choose, and the payment records described below, which match your payment to your order.
• Your answers at the research-use entry gate, including the research context you select there, stay in your own browser (section 7) and are not sent to us.
• Communications: messages you send through the inquiry or contact forms and any correspondence with us about an order.
• Mailing list: your email address, if you choose to join our list for news, offers and product information.
• Restock requests: your email address and the exact material and size you ask us to notify you about. A restock request does not add you to the mailing list or reserve inventory.
• Referral codes and store credit, where they are offered: your account's referral code; when a new customer's first order is placed with a referral code, a record that links that order and the new customer's account to the code and to the account that owns it; and your account's store credit history, which is every amount earned, used, returned or taken back, with its date and the order it relates to.
• Technical and usage data: the pages you visit, the time of each visit, the page that referred you, your device and browser type, and an approximate location no finer than a town, as described in section 5. Where session recording is enabled, this includes how you scroll, click and move the pointer on a page, as described there. The network address a form is submitted from is recorded with the message and, briefly, in a rate-limit log used to stop automated abuse. When you sign in, the network address and browser type of that sign-in are recorded, so that sign-ins an account holder did not make can be spotted.

The payment records depend on the method you use:

• Zelle: the sender's name, the amount and the memo, as shown in our bank's notification of the payment, so the payment can be matched to your order.
• USDC on Base: the wallet address the payment was sent from, the transaction hash and the amount.
• Bitcoin: the invoice ID, the amount and the status of the payment's invoice on our BTCPay Server.

USDC and Bitcoin payments are recorded on public blockchains. Anyone can see a payment's sending address, amount and time there, permanently, and neither we nor anyone else can change or remove it.

We do not request or handle card numbers, bank account details or wallet keys anywhere on this site. You pay from your own bank or wallet, outside the site.

3. How we collect it

• Directly from you, when you create an account, place an order, join the mailing list or contact us.
• Automatically, through our hosting provider's request logs, our own visit count and the analytics, session-recording and advertising tools described in section 5.
• From the services that confirm payments, only to the extent needed to match a payment to an order: our bank's notification of a Zelle payment, the status of an invoice on our BTCPay Server, and the details of a USDC transfer to our wallet, read from the public Base network.

4. How we use it

• To process, pack and ship your orders and to match your payment to them.
• To send order confirmations, payment instructions, shipping updates and replies to your inquiries.
• To send mailing-list news and offers to those who have joined it.
• To confirm a restock request and send one availability notice if that exact material and size returns.
• To manage your account and provide customer support.
• To run referral codes and store credit, where they are offered: to check that an order placed with a referral code is a new customer's first order and is not the code owner's own, which includes comparing its email and delivery addresses with those of earlier orders and of the code's owner; to add, hold, return or take back store credit; and to tell a code's owner when credit is added.
• To keep the compliance records that our research-use terms require.
• To understand how the site is used and to improve it.
• To measure our advertising, as described in section 5.
• To detect and prevent fraud, abuse and unauthorized access.
• To comply with legal obligations and to enforce our terms.

If you join our mailing list we will send you news about new releases and restocks, subscriber offers and other product information from Pioneer Labs. You can leave the list at any time using the unsubscribe link in any message or by contacting us; we mark the address unsubscribed immediately and send no further marketing messages unless you sign up again. You may also ask us to delete the address. We do not send marketing email to anyone who has not asked for it.

5. Cookies, analytics and advertising

Like any website, this site is delivered by a hosting provider that processes the technical information your browser sends in order to serve pages and protect the service, typically your IP address, browser and device type, the pages requested and the time of each request, under its own terms.

Nothing else described in this section starts until you have confirmed the research-use notice shown when you first enter the site. Until then no analytics, session-recording or advertising tool is loaded and no visit is recorded.

We use a privacy-focused analytics service to see which pages are visited. It sets no cookies and does not follow you across other websites; visitors are counted using a short-lived hash rather than a stored identifier, so what we see is aggregate traffic rather than a record of an individual's browsing. Separately, the site keeps its own count of visits so we can see how busy it is and where visitors come from. Each page view records the time, the page, the city, region and country reported by the network, map coordinates rounded to roughly ten kilometers, and a random identifier your browser makes up and keeps in its own storage so a return visit counts as the same visitor. That identifier is not a cookie, is never sent to anyone else and disappears when you clear site data. No IP address is stored with it. A page that shows one of your orders is recorded without its order number. These visit records are deleted after 13 months; totals that identify no visitor may be kept longer so that periods can be compared.

Our own shopping analytics also records product and size views, cart additions, checkout attempts and error categories, sold-out interest and successful restock requests. A random tab-session identifier lasts for up to 24 hours, with a new session after 30 minutes of inactivity. We record broad device and source categories; we do not store full referring URLs, campaign parameters, form entries or keystrokes in these event records. When an order is placed, the session may be linked to that order so we can measure payment completion. Raw session and event records are scheduled for deletion after 180 days; broad source and basket categories remain with order records. We use purchase history for aggregate repeat-purchase reports. Global Privacy Control disables these first-party browser analytics as well as our advertising tags and session recording. Operational order records remain necessary to process purchases.

To advertise the catalog, the site uses cookies and similar measurement tools from the advertising and analytics platforms we advertise on. These cookies let a platform tell whether a visit followed one of our advertisements and whether it led to an order. Depending on the cookie they last from a day to two years, and you can remove them at any time by clearing your browser's cookies.

What these tools are told is what the page shows: the pages you view, the product and size you add to the cart, the moment you begin checkout, and, when an order is placed, the order number, the items and the total. Google Analytics is also told how quickly each page loaded and responded in your browser, so we can find and fix slow pages. We do not pass your name, email address, telephone number or delivery address to any of them. They are not loaded on account, password-reset or mailing-list pages, so the private links in our emails never reach them, and the page address we report to Google Analytics leaves out any query string or fragment other than campaign (utm_) tags and Google's own ad-click identifiers. Each platform combines what it receives with its own records under its own privacy policy, and may use it to show you our advertisements elsewhere and to measure whether they work.

An order submission is measured separately from confirmed payment. Where configured, checkout also provides the Google Analytics client identifier and Meta browser or ad-click identifiers already issued by those platforms. We keep those identifiers separately from order records for up to 30 days so our server can report a later payment confirmation without requiring another site visit. The confirmation includes the order reference, confirmation time and amount received; Google also receives item identifiers and quantities. We do not include your account ID, name, email, address, phone, IP address, user agent or research declarations in this server report. Delivery diagnostics without the vendor identifiers are kept for up to 180 days. Global Privacy Control at checkout prevents this attribution from being collected. Blocking advertising does not stop an order or payment from being processed.

When it is enabled, the site also uses Microsoft Clarity, a service run by Microsoft, to see how pages are used, through session recordings and heatmaps. A recording captures your clicks and taps and the address of any link you select, your scrolling and pointer movement, and the page as it was shown to you, together with the page's address and title, the address of the page that led you to it, and your browser and device type. Anything you type into a form field is never captured, and numbers and email addresses shown on a page are masked. The exception is a search of the catalog: the page keeps the words you search for in its address and may repeat them in a note, and a recording includes both. We give Clarity no name, email address or account identifier. Clarity is not loaded on the checkout, sign-in, account, password or mailing-list pages. A recording that is running when you move to one of them ends there: the page is opened afresh without Clarity. Those pages are also marked so that Clarity would mask everything they show. Clarity starts only after you have confirmed the research-use notice, and never in a browser that sends the Global Privacy Control signal. It sets its own cookies, which let it recognize your browser from one page and one visit to the next, and which you can remove at any time by clearing your browser's cookies. Microsoft receives this data and may use it for its own purposes, including advertising, as set out in the Microsoft Privacy Statement (https://www.microsoft.com/privacy/privacystatement).

If your browser sends the Global Privacy Control signal, none of these tools is loaded, Clarity included, and no advertising or Clarity cookie is set. You can also opt out of personalized advertising in each platform's own ad settings, and a browser setting or extension that blocks third-party cookies stops the advertising tools from working. Blocking them does not affect your ability to browse or order.

6. How we share it

We share personal information only with the providers needed to run the store, and only what each one needs:

• Our database and authentication provider, where orders, accounts, compliance records and inquiries are stored and are visible only to Pioneer Labs.
• Our hosting and analytics providers, as described in section 5.
• The email provider that delivers our order, account and inquiry messages: your email address and the contents of those messages.
• Our own BTCPay Server, which runs on a server rented from a cloud server provider: the order number and amount of a Bitcoin order, to create and follow its invoice, and the technical information your browser sends when you open its payment page.
• A Base network node provider, through which we read public blockchain data: our own wallet address and the transaction hashes we look up, including any you give us.
• Shipping carriers: your name, delivery address and telephone number, so your parcel can be delivered.
• Advertising platforms: the advertising measurements described in section 5, never your name or contact details.
• Microsoft, when session recording is enabled: the Clarity recordings and heatmap data described in section 5, never anything typed into a form other than a catalog search.
• Legal authorities, when the law requires it.

Where referral codes are offered, the owner of a referral code is told when a new customer's first order placed with that code has shipped, by email and in their account's store credit history, and that history shows if the order is later refunded and the credit for it is taken back. They learn only that a first order with their code shipped or was refunded, the date, and the amount of their own credit. They are never told who placed the order or what it contained. If a code's owner has shared the code with only one person, they may be able to tell whose order it was.

We do not sell, trade or rent personal information. Microsoft may use what Clarity sends it for its own purposes, including advertising, as described in section 5; apart from that, we do not share personal information with anyone for their own marketing. No other third-party content is loaded on the site; fonts and images, including the Pioneer Labs logo, are served from this site itself.

7. Information stored in your browser

The site keeps a small amount of state in your browser's local storage so it is usable across pages: the contents of your cart, any items you have saved, and your acknowledgment of the research-use policies. Saved items stay on your device and are never transmitted to us. The cart is sent to us only at the moment you place an order, as the lines of that order. The exception is session recording, where it is enabled (section 5): a recording of a page that shows your cart or your saved items shows them as that page did. Clearing your browser's site data removes everything held locally.

Where referral codes are offered and you arrive through a referral link, the code in that link and the time you arrived are also kept in your browser's local storage, for up to 30 days, so the code can be filled in at checkout. Nothing is kept until you have confirmed the research-use notice. The code is sent to us only at checkout, when it is checked and when you place an order with it. It is removed from your browser once you order with it, remove it at checkout, or it turns out that it cannot be used on your order.

8. Research use only

All products are supplied strictly for laboratory and scientific research. By entering the site and by placing an order you confirm that you are at least 21 years old, that you are a qualified researcher or purchasing on behalf of a laboratory, company or institution, that the products will not be used for personal, household, recreational or consumer purposes, and that you accept responsibility for their lawful use in a research setting. The full terms are set out in the RUO disclaimer and the terms of sale.

9. Data security and retention

The site is served over an encrypted connection, the database is protected by row-level access rules so that customer and order data is reachable only through our own server, and passwords are stored only in encrypted form by our authentication provider. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security, but we take reasonable measures to protect what we hold.

We keep personal information for as long as your account is active or as needed to provide the service, to comply with legal and tax obligations, to resolve disputes and to enforce our agreements. A pending restock request remains until that exact size returns or you ask us to delete it; completed restock requests and email-delivery records are scheduled for deletion after 180 days. If you ask us to delete your account we will remove your personal information within 30 days, except for order and compliance records we are required to retain, which are kept for the period the law requires and then removed. Our own records of page visits are deleted after 13 months (totals that identify no visitor may be kept longer), and records of individual sign-ins after 90 days. The rate-limit log is cleared automatically after a short time.

Deleting your account deletes its referral code. The store credit history is a financial record: it is kept with our order records after an account is deleted, identified by internal account IDs and not by a name or an email address.

10. Your rights and choices

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Ask us to correct information that is inaccurate.
• Ask us to delete your personal information, subject to the retention obligations above.
• Receive a copy of your information in a portable format.
• Object to or restrict certain processing.
• Opt out of the sharing of personal information for cross-context behavioral advertising. The advertising cookies and, when it is enabled, the Clarity session recording described in section 5 are the only such sharing on this site. Sending the Global Privacy Control signal from your browser opts you out of both; blocking third-party cookies opts you out of the advertising cookies.

To exercise any of these rights, contact us at the address below. We may need to verify that you are the person the information relates to before acting on a request. Analytics data is aggregated and not tied to you individually, so there is generally no individual record within it to retrieve or erase. A Clarity session recording covers a single visit, but we give Clarity no name, email address or account identifier, so we generally cannot tell which recording, if any, is of your visit.

11. Children

This site and its products are intended for qualified researchers aged 21 or over. It is not directed at children and we do not knowingly collect information from anyone under 21. If we learn that we have, we will delete it promptly.

12. Third-party links

Where the site links to another website, for example a carrier's tracking page, that site's privacy practices are its own. We encourage you to review them.

13. Changes to this policy

This policy reflects how the site works as of October 3, 2026. We may update it from time to time; changes will be posted on this page with a revised date, and any change to what the site collects is described here in the same release that makes it.