Privacy policy.

We collect information you provide directly to us, your email address when you join the waitlist or request a skin assessment, and your name and message if you write to us. Nothing is sold on this site yet, so we ask for no payment or delivery details at all. We also collect technical data including your IP address, browser type and device information to improve your experience.

The analyser asks for a photograph of your face. A photograph of a face is personal data, and we would rather over-explain what becomes of it than leave you to assume.

It is read by a machine, not by a person. The assessment is written by a large language model — currently OpenAI’s GPT-4o, reached through OpenRouter — from your photograph and your ten answers. Nobody at Zero Lines sees your picture. We instruct the provider not to retain it and not to train on it, and that instruction is sent with every request rather than set once and assumed.

The photograph travels over an encrypted connection, is read once, and is not stored by us afterwards. It is never attached to your email address, never published, and never shared with anyone else. Only the finished written assessment is kept — for thirty days, against a random identifier, so the private link in your email keeps working. After thirty days it is deleted automatically.

Because that model is operated in the United States, using the analyser involves a transfer of personal data outside the UK and EEA. If you would rather your photograph did not leave Europe, please do not use it. Nothing else on this site asks for a picture, and you lose nothing else by skipping it.

The assessment describes how your skin looks. It is not a medical diagnosis, it is not written by a clinician, and it should not be relied on as either.

• To write to you when ordering opens, which is the whole purpose of the waitlist
• To send you the skin assessment you asked for, and to answer you if you write to us
• To improve our website, products and services
• To comply with legal obligations

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. Your information is stored securely and accessed only by authorised personnel.

Under the GDPR you have the right to access, correct, delete or restrict the processing of your personal data. You may also object to processing and request data portability. To exercise these rights, contact us at privacy@zerolines.life.

You do not have to ask us to stop emailing you. Every email we send carries an unsubscribe link that works on its own and takes effect immediately — and your mail app may show its own unsubscribe button at the top of the message, which does the same thing. Replying and asking still works if you would rather.

We use cookies and similar technologies to enhance your browsing experience, analyse site traffic and understand where our visitors come from. You can manage your cookie preferences through your browser settings, and the full detail is set out in our cookie policy.

We name them rather than describing them vaguely. Cloudflare hosts this site, stores what you send us in a database located in Western Europe, runs the analyser’s backend and holds finished assessments for thirty days. OpenRouter and OpenAI read the analyser photograph, as set out in section 02. Resend delivers our email. Each is bound by its own data-processing terms, and we share with nobody else.

This site was hosted by Netlify until August 2026, and this section said so. It no longer is, and nothing of yours remains there.

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

If you have any questions about this privacy policy or our data practices, please contact us at privacy@zerolines.life, write to Zero Lines, Gibraltar, or use the contact page.