Privacy Policy
Last updated: December 31, 2026
The short version: we collect your email and your skin quiz answers. That's it. No payment, no card details. We don't sell your data. You can ask us to delete everything at any time and we will.
What we collect
When you join the waitlist
Your email address, and a one-way hash of your IP address plus your browser's user-agent string. The hash lets us block spam and abuse without storing your actual IP address.
When you complete the skin quiz
Your first name, age range, gender, and your answers about your skin: skin type, sensitivity, main concern, breakout patterns, routine preference, lifestyle, climate, any treatments you're using, pregnancy or breastfeeding status, known allergies, and roughly what you spend monthly.
Some of these answers say something about your health. We treat them as sensitive information: they exist to personalize your recommendations and nothing else. We do not sell them, we do not share them with advertisers, and we do not use them to make decisions about you beyond which products to suggest.
What we do with it
We use your email to confirm your spot, tell you when your scan is ready, and send occasional product updates. We use your quiz answers to build your skin profile and match you with products. We use aggregate, de-identified patterns (for example, “38% of our waitlist has combination skin”) to decide what to build first.
We share data only with the vendors that run AetherSkin: Supabase (database hosting), Vercel (site hosting), and Resend (email delivery). They process data on our behalf under their own terms. We do not sell or rent personal information to anyone.
How long we keep it
Waitlist and quiz data is kept while your entry is active and for up to 24 months after your last interaction with us, after which it is deleted or irreversibly anonymized. Unverified signups (where you never clicked the confirmation link) are deleted after 90 days. Verification links themselves expire after 7 days.
Future scan data
Face scans are not collected today. When the AetherSkin app launches, scans will be governed by a separate, explicit consent step shown before any photo is taken. Our standing commitments: your photo is used to generate your results, we will not use it to train models without a separate opt-in you can decline, and you will be able to delete it.
Your rights
You can ask us to show you your data, correct it, or delete it, and you can withdraw consent or unsubscribe at any time using the link in any email we send. Depending on where you live (for example the UK, EU, California, or Australia) you may have additional rights including data portability and the right to complain to your local regulator. We honour these requests regardless of where you live.
Cookies
AetherSkin does not use advertising or tracking cookies. We store a single local preference recording your cookie-banner choice so we don't ask you twice. If we add analytics later, it will only load after you opt in, and this page will be updated first.
Children
AetherSkin is intended for people 18 and over. We do not knowingly collect information from children. If you believe a minor has given us data, contact us and we will delete it.
Contact & changes
A dedicated support address is being set up and will be published here. In the meantime you can reply to any email you receive from AetherSkin to reach us, including for access or deletion requests. If we change this policy materially, we will say so by email before the change takes effect.