ZEROCONFINES
§ Legal · the boring + important file
Updated · Oct 13, 2026Version · v0.2Jurisdiction · State of Washington, USA

Privacy and Terms.

Two documents on one page. Privacy first — what we collect, why, and what you can do about it. Terms below — the agreement between you and ZeroConfines when you use the site, take the Ops Health Check, or download a kit.

§ 01Overview.

ZeroConfines is a publishing and diagnostic service run by Zero Confines, LLC, based in Seattle, Washington. We collect as little as we can: what we need to run the site and your account, run the Ops Health Check, send the emails you ask for, and answer you when you write. We don't sell your data, and we don't use it for advertising.

This policy covers zeroconfines.com and its subdomains. It doesn't cover the sites we link to.

§ 02What we collect.

From every visitor

  • Our host, Vercel, logs each request: your IP address, browser, the page and the time. We keep these logs for less than a day.
  • When you use a form or the Ops Health Check, our rate limiter keeps your IP address with a request count for a few minutes, to stop abuse.
  • If you accept analytics, Google Analytics records the pages you visit, using a cookie and an identifier. It doesn't load unless you accept.

When you take the Ops Health Check

  • Your answers, your role and stage, and the scores we work out from them.
  • Your progress, saved in your own browser so you can pick up where you left off.
  • Your email address, if you ask for the full report, and when you sent it.

When you subscribe to the newsletter

  • Your email address, where you signed up, and when you confirmed. We email you first and add you only once you confirm. Confirmed addresses go to Beehiiv, our newsletter provider; their privacy policy also applies.

When you create an account

  • Your email, name and password. Supabase handles sign-in, and we never see your password. If you sign in with Google or LinkedIn, they give us your email, name and profile photo.
  • What you add later: your role, job title and LinkedIn URL; your company's name, website, industry, stage and logo; your email preferences; your assessments and weekly check-ins. Company logos are stored as public files, so anyone with the link can see them.
  • If you turn on two-step sign-in, your recovery codes, stored only in scrambled (hashed) form.
  • If you connect Asana, the access keys Asana gives us.

When you contact us

  • Your name, email, company and message. We store it and email it to our inbox.

§ 03Why we collect it.

For three reasons, in this order: running the service, improving it, and contacting you when you've asked us to. Bot checks on the sign-in pages and rate limits on the forms keep them from being abused. We don't collect data for advertising or for sale, and we don't build a profile of you beyond what your Ops Health Check report needs.

To write the summary in your Ops Health Check report, we send Anthropic's Claude your scores and stage. Never your name, email or company.

§ 04Who we share it with.

The services that handle data for us:

  • Vercel: hosting, and storage for company logos.
  • Supabase: our database, sign-in, and the sign-in emails.
  • Resend: sends our other emails: reports, confirmations, welcome and reminder emails, some newsletter emails, and contact messages to our inbox.
  • Beehiiv: newsletter delivery, once you confirm.
  • Anthropic: writes your Ops Health Check summary from your scores.
  • Upstash: rate limiting.
  • Cloudflare: the Turnstile bot check on sign-up, sign-in and password reset.
  • Google: Analytics, only if you accept; the booking calendar on our working-session page; and the fonts in our emails, which your email app may load from Google.
  • unpkg.com: our home page loads one script from this public code host, which sees your IP address when your browser fetches it.
  • Google, LinkedIn and Asana: only if you choose to sign in with them or connect Asana.

We don't share data with advertisers. We don't sell data.

§ 05How long we keep it.

  • Hosting logs · less than a day. Rate-limit counts · a few minutes.
  • Your account · until you delete it, which you can do yourself under Account. That removes your profile, the companies you own and their data. Newsletter sign-ups, contact messages, reports from before you had an account, and uploaded logo files stay until you ask us to delete them.
  • Ops Health Check reports · until you ask us to delete them, so you can come back to them.
  • Newsletter · until you unsubscribe. We keep a note that you did, so we don't email you again. Ask, and we'll delete it entirely.
  • Contact messages · until you ask us to delete them.
  • Analytics · as long as our Google Analytics setting allows, at most 14 months.

§ 06Your rights.

Wherever you live, you can ask us to:

  • Show you the data we hold about you.
  • Correct anything that's wrong.
  • Delete it.
  • Stop using it.
  • Give you a copy you can take elsewhere.

Email info@zeroconfines.com with the subject "Privacy request". We'll confirm we got it within 10 days and answer within 30 days. We may ask you to confirm the request comes from your email address.

§ 07Cookies + tracking.

  • zc-consent remembers your cookie choice for a year.
  • Sign-in cookies from Supabase keep you signed in.
  • Google Analytics cookies are set only if you accept analytics. Change your choice any time with "Cookies" in the footer. If you switch it off, analytics stops loading and we remove the cookies it set on this site.
  • Your browser's own storage keeps your Ops Health Check progress and weekly check-in answers on your device.

We don't use advertising cookies.

§ 08Where you live.

In the EU or UK

We use your data to give you what you ask for (your report, your account, the newsletter), with your consent (analytics), and for our legitimate interest in keeping the site secure (bot checks and rate limits). The services we use are based in the United States, and your data may be processed there. You can complain to your local data protection authority, though we'd like the chance to help first.

In California

We don't sell or share your personal information, and we won't treat you differently for using any of the rights above.

§ 09Contact.

Privacy questions, data requests, or anything else: info@zeroconfines.com. By post: Zero Confines, LLC, 2033 6th Avenue, Suite 600, Seattle, WA 98121, USA.

If we change this policy, we'll update the date at the top of this page.