Your account, your data.
A Peel account exists for one reason: so your research floor is still there when you come back. This page says exactly what is stored, why, for how long, and how to make it go away. Last updated 24 September 2026.
What we store
| Data | Why | Kept until |
|---|---|---|
| Email address and the name you enter | To sign you in and label your floor | You delete the account |
| A salted scrypt hash of your password (never the password) | To check your password without being able to read it | You delete the account |
| Session records (a hash of your sign-in token, when it was last used, the IP address and browser it came from) | To keep you signed in and let you sign out everywhere | 30 days after last use, or when you sign out |
| Sign-in events (time, kind, IP address, email) | To rate-limit password guessing and to audit access | 30 days; your identity is scrubbed from them the moment you delete the account |
| Usage events: which feature you used and when, how long it took, error codes, the page you viewed, your IP address and browser | To run the pilot, spot problems and fix them | 90 days; anonymised the moment you delete the account (no identity, IP or browser is kept) |
| Your research: conversations with Lois, notebook entries, floors and the nodes on them, hypotheses, experiments, verdicts and the ledger chain | This is the product — your saved work | You delete the account (everything above is erased with it) |
What we do not do
We do not sell or share your data. We do not use your research to train models. We do not track you across other sites, and we use no third-party analytics — the usage events above are recorded by our own servers only. The facts on your floor come from public scientific databases (UniProt, RCSB PDB, AlphaFold DB); those records are shared knowledge, not personal data, and stay in the shared cache when you leave.
Where it lives
Accounts are stored in a managed Postgres database (Neon, hosted on AWS in the United States) and served by Vercel. Connections are encrypted in transit; the database is encrypted at rest.
We send email only for two things: confirming your address and resetting your password. When email delivery is not configured on this deployment, those two features are unavailable and the site says so instead of pretending.
Deleting your account
Open your account page, confirm your password, and choose Delete my account and all its data. The deletion is immediate and cannot be undone. If you cannot sign in, contact us from the address on the account.
Scope and contact
Peel is a research prototype from Perslis Research. Answers on your floor report database evidence with receipts; they are not medical, legal or professional advice. Questions about this notice: contact page.