Last updated: September 3, 2026
Overview
This Privacy Policy explains what information TWO+DOS collects when you use twoplusdos.com, how we use it, and the choices you have. By creating an account or placing an order, you agree to the practices described here.
TWO+DOS supplies research-grade materials strictly for laboratory and in-vitro research use. This policy covers the data side of that relationship: your account, your orders, and your visits to our site.
Information We Collect
We collect the information needed to run a research supply store and fulfill your orders.
Research-use acknowledgment
- Before the catalog opens you confirm that you are ordering for research use only and give us an email address. We record that acknowledgment, the email, and the time it was made.
Account information
- The email address that identifies your account. Accounts are created without a password; signing in is done with a one-time code we email you. If you choose to set a password, we store it only as a salted hash.
- Any name, addresses, and phone number you add to your account or enter at checkout.
- Your membership tier, your points balance and ledger, any recurring-order schedule, and your referral link and the referrals made through it.
Order information
- The products you order, your order history, and any order notes or EIN you choose to add.
- The billing and shipping addresses you provide, including those supplied by a wallet such as Apple Pay or Google Pay when you use express checkout.
- Support requests and replies you send us.
Payment information
- Payments are handled by Stripe. We never see or store full card numbers. Stripe collects and processes your payment details to complete your purchase, and shares with us the payment status and limited details such as the card brand and last four digits.
- If you join a paid membership tier or set up a recurring order, Stripe keeps a reusable payment method on file for us so those charges can be made when due. You can remove it by cancelling the tier or schedule.
Usage and device information
- Pages you view and actions you take on the site, such as adding to cart and completing an order, collected by our own first-party analytics. Where an email is attached to such an event we store it as a one-way hash.
- Device and browser type, IP address, referring site, and general location.
- Information collected through cookies and similar technologies, described below.
How We Use Your Information
We use the information we collect to:
- Create and manage your account, and send you sign-in codes when you ask for them.
- Process, ship, and track your orders, and let you know if a payment did not go through.
- Apply member pricing, points, sale pricing, bulk pricing, discount codes, and shipping benefits correctly.
- Bill paid membership tiers and recurring orders on their schedules, and remind you before each charge.
- Send order confirmations, shipping updates, and service messages, and, unless you opt out, reminders about items left in your cart, restock alerts you asked for, and news about the store.
- Run the referral program and credit points to the accounts involved.
- Respond to support requests and Certificate of Analysis requests.
- Measure which pages and, where you consent, which advertising brought you to the site, so we can improve the store.
- Detect, prevent, and address fraud, abuse, and security issues, including limiting repeated sign-in or account-creation attempts.
- Meet our legal, tax, and recordkeeping obligations.
Marketing Email
When you give us an email address at the research-use acknowledgment, at sign-in, or at checkout, we may use it to send you announcements and offers from TWO+DOS. Every marketing email includes an unsubscribe link, and you can also manage email preferences from inside your account. Unsubscribing does not stop order confirmations, shipping updates, sign-in codes, or billing notices, which we send because you have an account or an order with us. Cart reminders are limited in number and stop on their own.
How We Share Information
We do not sell your personal information for money. Several US state privacy laws define a sale, or sharing for advertising, broadly enough to cover the advertising measurement described under Cookies, Analytics, and Advertising below. We treat it that way, and you can opt out of it at any time on the Do Not Sell or Share My Personal Information page. Everything else we share is what the store needs to run, or what the law requires.
Service providers
We share information with vendors who help us run the business, and only the data they need to do their job:
- Stripe, our payment processor, for charging orders, storing payment methods you authorize, and preventing fraud.
- Shipping label and carrier services, which receive your name, shipping address, and phone number to deliver your order. Our fulfillment supplier receives only the products and quantities to pull, never your identity or address.
- Email providers (Amazon Simple Email Service for account and order email, and Brevo for our mailing list), which receive your email address and the message content.
- Hosting and technology providers that run our storefront and store systems.
- Advertising and measurement partners, specifically Meta (Facebook and Instagram). While advertising cookies are on for you, Meta receives the events described in the next section, which include a hashed form of your email address, your IP address, and what you viewed, added to a cart, or bought. Meta does not receive your name, your shipping address, or your payment details.
- Analytics providers, specifically Microsoft Clarity, which records how pages are used so that we can find and fix what does not work. Clarity is not an advertising network, receives no order or contact information, and is described in the next section.
These providers are required to protect your information and to use it only for the services they provide to us.
Legal and safety
We may disclose information when required by law, to respond to a valid legal request, or to protect the rights, safety, and property of TWO+DOS, our customers, or others.
Business transfers
If our business is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will continue to protect it under this policy or notify you of any material change.
Cookies, Analytics, and Advertising
Essential cookies keep you signed in, hold your cart, remember your research-use acknowledgment, and secure checkout. The site cannot work without them.
First-party analytics. We record page views and store events on our own servers to understand how the site is used. This data is not shared with advertising networks.
Session replay. With your OK, we use Microsoft Clarity to record how pages are used, including mouse movement, scrolling, clicks and where people leave, so that we can find and fix parts of the site that do not work. Clarity is set to mask text, and the checkout form is masked in full, so what you type into it is never recorded. Clarity is not an advertising network and these recordings are not used to target ads. Turning advertising cookies off, or sending a Global Privacy Control signal, stops session replay too.
Advertising cookies and pixels. We use advertising cookies and pixels from Meta (Facebook and Instagram) to measure whether our ads led to a visit or an order. Those partners may set cookies, and we may send them events about your visit (pages and products viewed, cart and checkout steps) and your orders from our server, with contact details hashed before they leave us. Under some US state privacy laws this measurement can count as a sale or sharing of personal information, and you can opt out of it at any time. Visitors in the United States see a notice on their first visit with a one-click opt-out, except in Washington and Nevada, where nothing loads unless you accept. Visitors outside the United States are also asked before any advertising cookie is set. If you opt out or decline, no advertising cookies or pixels are loaded and no such events are sent. We also keep a small first-party cookie noting which channel brought you to the site, used only for our own reporting.
To opt out or change your choice, use the Do Not Sell or Share My Personal Information page, linked in the footer of every page. We also treat the Global Privacy Control browser signal as an opt-out. Blocking essential cookies in your browser will break sign-in and checkout.
Browser signals. Browsers can send two different privacy signals, and we answer them differently. We honor Global Privacy Control: if your browser sends it, you are opted out automatically and no advertising pixel loads. We do not act on the older Do Not Track header, because the industry never agreed on what it means; use Global Privacy Control or the opt-out page instead.
Tracking on other sites. While advertising cookies are on, the partners named above may collect information about your activity over time and across other websites and apps they work with, and use it to measure and target advertising. We do not track you on other sites ourselves, and we do not receive their records of what you do elsewhere.
Data Retention
We keep your account information for as long as your account is active. Order, payment, points, and tax records are kept for the period required to meet our legal and accounting obligations. Analytics events are kept in identifiable form only as long as needed for reporting and are then aggregated or deleted. Sign-in codes are discarded after they are used or expire. When information is no longer needed, we delete it or remove the details that identify you.
Security
We use reasonable administrative, technical, and physical safeguards to protect your information. Sign-in codes expire after ten minutes and work once; passwords, where set, are stored as salted hashes; payment details are handled by Stripe and never touch our servers; and our systems limit repeated attempts to sign in or create accounts. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If you believe your account has been compromised, contact us right away.
Your Choices and Rights
You have control over your information:
- Sign in with a code at any time to review and update your account details, addresses, and email preferences.
- Cancel a paid membership tier or a recurring-order schedule from your account.
- Unsubscribe from marketing email using the link in any message, while still receiving order and service messages.
- Opt out of advertising cookies and pixels at any time on the Do Not Sell or Share My Personal Information page.
- Ask us to delete your account. We will remove it and the information that identifies you, keeping only the records we are required to retain.
Depending on where you live, including if you are a California resident, you may have additional rights, such as the right to know what personal information we hold, to correct or delete it, to receive a copy of it, and to opt out of the sharing of information for advertising, which you can do by declining advertising cookies. To make a request, email hello@twoplusdos.com or send us a message from the Support page in your account. We may need to verify your identity before acting on your request, and we will not treat you differently for exercising these rights.
Children
Our site and products are intended for professional and research users. The site is not directed to children, and we do not knowingly collect personal information from anyone under 18.
Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will post the updated policy on this page and revise the date at the top. Your continued use of the site after an update means you accept the revised policy.
Contact Us
For privacy questions or requests, email hello@twoplusdos.com or message our support team from the Support page in your account. We will respond within a reasonable time.
A Note on This Template
This Privacy Policy is a general template provided for convenience. It is not legal advice. Privacy laws vary by location and change over time. Please have qualified legal counsel review and adapt this policy before you rely on it.