Customer and partner accounts sign in with email and password. Sessions are stored in the browser and expire automatically. Staff and admin access to the back-office is gated by role — only accounts explicitly granted a staff or admin role can view orders, customer records, inventory, or affiliate data.
Affiliate partners access their portal through a private, per-account portal link. Partner data is fetched server-side and scoped to the requesting partner; no other partner's data is ever returned by the portal endpoint.
The database enforces row-level access rules so that anonymous visitors cannot read or modify customer records, orders, internal inventory, certificates of analysis, wholesale accounts, or affiliate financials. The public website only reads published product and journal content.
Internal database helper functions are not callable from the public API surface — they run only as database triggers or from trusted server code.
Our website and back-office run on Lovable Cloud, which uses Supabase for database, authentication, and storage, and Cloudflare for hosting and content delivery. Transport between your browser and our services is encrypted with TLS.
We do not sell customer data. We share data with subprocessors only as needed to operate the site (hosting, database, email delivery for transactional messages).
Report a suspected vulnerability or security concern to security@gatsbypeptides.com . Please include steps to reproduce and avoid accessing other users' data while testing.
Membership Application
Membership is intended for qualified researchers and organizations seeking access to Gatsby’s curated research collection and supporting analytical documentation.
Members
Sign in to access your account, order history, COA library, member pricing, and saved research collections.
