Legal and privacy

Privacy Policy

Version: 1.8 · Effective: 31 July 2026 · Last updated: 4 October 2026 (Stand: 2026-10-04)

1. Controller

Gian-Luca Luongo, Dorfstrasse 77, 5430 Wettingen, Switzerland info@zerolog.ch

The controller is a natural person, not a company. There is no Data Protection Officer; the controller answers data protection requests personally at the address above.

2. About the name

ZeroLog means the service is built not to need your identity: no email address, no phone number, no real name, and no IP address anywhere in the database or attached to your account.

That last one is deliberately narrower than "no stored IP addresses", because that would not be true. IP addresses reach short-lived security logs (failed logins, abuse events) which are kept for weeks (§3.4, §8). Weeks is storage. What does not happen is an IP being written into your account, your chats, or your history.

One caveat belongs up front: paying identifies you. Registration collects no name, but card and Google Pay payments carry your name and billing address to Stripe, and the operator can see them there. If you pay, you are identifiable: by the operator, by Stripe and by your bank. Only never-paying accounts stay unnamed, and even those are not untraceable.

It does not mean nothing is written down. Ordinary chats are stored so your history is there when you return. Usage is recorded so you can be billed accurately. Security events are logged so the service can defend itself. This policy states plainly what exists.

If you want content the operator genuinely cannot read, use anonymous chats (§6).

3. What is processed

3.1 Account

• Username, password hash (bcrypt), registration timestamp, permission flags.
• An email address is optional and empty by default. You may add one; you may remove it again. Without one there is no password reset and no way for us to notify you — that is the trade, and leaving it blank stays a fully supported choice.
• No phone number, no real name. There is no field for either.

3.2 Chats, messages and files

• Chat titles, messages, attachments, generated images, and files inside your containers, stored in a SQLite database and on disk on the server in Switzerland.
• Prompts you send are transmitted to Featherless, the inference provider for customer accounts (§5), to produce a reply. This is the core of the service and cannot be switched off while using a model. Your own connected accounts (Claude Code, Codex, Gemini CLI) are the exception, and they are yours, not ours (§5).

3.2.1 Separate image engine

The optional Bilder / Images feature sends your image prompt and selected dimensions to Infomaniak Network SA (Switzerland) to create one image with Flux schnell. Generating from the form is an explicit request; image tools for AI chats are off until you enable their separate switch. Images are charged from your ZeroLog balance, which you can fund with MoonPay.

The form prompt stays in memory during processing. The image job database stores an owner-linked request identifier, a keyed check value for duplicate detection, status, dimensions, fixed price, timestamps and expiry, without the prompt or the provider's revised prompt. Results and request metadata are stored privately on the ZeroLog server for 30 days, with automatic cleanup. Deleting a result removes its actual file sooner; the duplicate-detection record remains until expiry. Deleting the account removes the request records; the cleanup also removes orphaned files. Financial usage and reservation records follow the existing accounting retention. Backups have their own retention and are not described as immediately erased by a gallery deletion.

AI tool arguments can contain the prompt in the existing chat history; the selected chat's retention still applies. A Coding Agent can save an owned result in its own container and use a vision-capable model to inspect it; chat processing can then send the image to the selected model provider. Local file copies and shell histories follow the workplace's retention, independently of the gallery. Native provider login credentials and the Infomaniak API key are not transferred between these services. Infomaniak describes Swiss processing and no query retention; this has not been independently verified and is not a platform-wide Zero Data Retention guarantee.

Previously stored images remain deleted. Leonardo and OpenRouter image generation remain disabled. The Design Engine uses HTML, inline SVG and CSS and does not generate or reuse images.

3.3 Usage and billing

• Per-request: model used, token counts, cost, timestamp, and which chat it belonged to. This is what your ledger and spend limits are computed from.
• Payment records: Stripe's transaction and customer identifiers, amount, currency, status. Card numbers never reach this server: Stripe handles them.

3.4 Technical and security data

• Session records (session identifier, creation and last-use time) so you stay logged in.
• Sign-in events: time, outcome, browser identification, and a one-way check value derived from the source address. The address itself is not stored — the check value is an HMAC and cannot be turned back into an address; it exists so we can tell a sign-in from a familiar source from an unfamiliar one, and warn you about the latter. Visible to you under Settings, kept 90 days.
• Rate-limiting and abuse counters keyed on IP in memory and in short-lived server logs. IP addresses are not stored in the database as part of your account or your history.
• Server logs (errors, security events such as failed logins, container lifecycle). These can contain an IP address transiently and are rotated by the system journal.
• Container and agent activity: commands run, exit codes, tool calls, needed to show you what an agent did and to investigate abuse.

3.5 What is deliberately NOT collected

• No advertising or analytics trackers, no tracking pixels, no third-party cookies.
• No profiling, no automated decision-making with legal effect, no sale of data.
• No behavioural advertising of any kind.

3.6 Error and crash reports

The ZeroLog web interface, the ZeroLog Android app and ZeroLog Code report errors and crashes to this server, so that faults can be found and fixed.

• What a report can contain: an error code and a shortened error message; for a crash, a redacted and shortened part of the stack trace; and limited details such as the app version, device and operating system, browser, and page or screen where it happened. A report can also include an approximate time and a coarse estimate of how long the app had been running. These details help identify the fault. Reports are not meant to include account or chat identifiers or chat content. Redaction uses pattern matching and can miss unusual forms, so error text may rarely contain a personal fragment.
• What is not kept: the error store has no field for an account or user identifier, for chat content or for the IP address. Before anything is stored, the server removes email addresses, credentials, identifiers such as UUIDs, home-directory paths that carry a user name, the query part of web addresses and IP addresses from the text. That is pattern matching: it catches the known forms and can miss an unusual one, so in rare cases a message can still hold a personal fragment, for example an email address in an unusual spelling.
• IP address: a report arrives over a normal connection, so your IP address comes with it. The endpoint uses it only in memory, to throttle floods, and does not write it to the error store. Like any request it can appear briefly in the server logs (§3.4) and passes Cloudflare (§5).
• On your device: a report the apps or zerocode could not send, for example because the program crashed, stays on your device until the next successful send and is then deleted.
• On the server: reports of the same kind are merged into one entry per error form, with a counter and the times it first and last occurred. An entry becomes due for deletion when its error form has not occurred for 30 days. The cleanup runs when a new report arrives, at most once an hour, not on a fixed timer; while no reports come in at all, a due entry can stay longer, until the next report. A form that keeps occurring keeps its example message for as long as it keeps occurring. A merged overview of the last 30 days is rebuilt every 10 minutes; a change log of that overview (which forms are new or growing, with their example message) is kept on the same server and currently has no automatic deletion.
• Who sees them: the operator, and an automated check the operator runs, which reads the merged overview and opens repair tasks. That check uses a language model of Anthropic, PBC (USA), so the redacted entries reach Anthropic. They have no field for an account identifier or an IP address. If redaction misses something personal in a message, that fragment reaches Anthropic too. Nothing else is passed on; there is no third-party crash service.
• Legal basis: overriding private interest in a working and secure service (Art. 31(1) FADP); for the GDPR, legitimate interest (Art. 6(1)(f)). You can object (§9).

3.7 Push notifications

Push notifications are off until you switch them on. There are two separate channels.

ZeroLog apps (ntfy). The ZeroLog apps receive notifications through an ntfy server that the operator runs at ntfy.zerolog.ch, on the same server in Switzerland as the rest of the service. That server does not pass notifications on to ntfy.sh, Google (Firebase) or Apple.

• What it notifies about: a reply that finished or failed while you were not watching; a job that finished, is waiting for you or failed; credit running low; a new sign-in to your account; and, only if you switch it on, a change to the legal texts. Each kind can be switched on or off in Settings.
• What is stored: one random channel name (a "topic", 128 bits of randomness, not derived from your account) per account, and when it was created. It is created the first time you switch push on and kept until you switch push off, generate a new channel or delete your account. It is part of a data access request and is deleted with the account.
• What a notification says: only fixed, generic texts, for example "Reply ready: the reply in chat #12 is ready", with at most a chat or job number. Never chat content, chat titles, names, amounts or error messages. The number opens nothing without signing in.
• Temporary storage on the ntfy server: sent notifications are kept for 24 hours, so a device that was offline can still fetch them, and are then deleted.
• Who can read them: anyone who knows the channel name can read the notifications sent to it; only the ZeroLog server can send. Keep the name to yourself. You can generate a new channel at any time: the old one then receives nothing new, and what was already sent to it stays retrievable until its 24 hours are up. Or switch push off, which deletes the channel name.
• Connection: your device reaches ntfy.zerolog.ch through Cloudflare (§5), like every other request, so Cloudflare sees your IP address, the channel name and the generic text in transit. The ntfy server uses the IP address in memory to limit requests; it can appear briefly in the server logs (§3.4).

Browser notifications (Web Push). In the web interface you can allow notifications under Settings. This uses the standard Web Push mechanism of your browser: the browser registers with its vendor's push service (Chrome and Edge: Google; Firefox: Mozilla; Safari: Apple; Windows: Microsoft) and hands ZeroLog an address at that service. Your browser chooses the push service, not ZeroLog.

• What is stored: per device, that push address, the two keys the browser supplies for encrypting messages to it, an optional device label, when it was registered and a counter of failed deliveries. It is deleted when you remove the device, when the push service reports that the subscription was revoked, or with the account, and it is part of a data access request.
• What passes the push service: the notification's title and a short text, for example the event, a job's type and number, the reason it paused, or the domain name a domain watch is waiting for. It is encrypted for your browser before it leaves the server, so the push service cannot read it. It does see the push address, the time and size of the message and your device's connection. It keeps an undelivered message for at most one hour. Google, Mozilla, Apple and Microsoft are based in the USA.

Legal basis: notifications are a function of the service that you switch on yourself, so they rest on contract performance (Art. 6(1)(b) GDPR), not on separate consent; you can switch them off at any time. Handing a Web Push message to your browser's push service is directly connected with that contract (Art. 17(1)(b) FADP); its content is encrypted so that the push service cannot read it.

4. Why, and on what legal basis

5. Who else sees anything (recipients and sub-processors)

One inference provider for customer accounts. Every model a customer account can pick is served by Featherless (USA). The model picker shows nothing else, and the service refuses a model id from any other provider, whichever way it arrives: the chat, the command line, the Anthropic-compatible API, the site builder, agents, jobs or the browser extension. The same holds for the steps the service runs on its own on your behalf: condensing a long chat, extracting memory candidates, describing an image for a text-only model. They run on Featherless too, or not at all. If Featherless fails, you get an error. Your request is not sent to another provider instead, and an empty balance stops the request rather than switching you to a free model somewhere else.

Using ZeroLog as a customer involves these third parties:

Retention at Featherless. Featherless states in its privacy policy (last updated 10 June 2024) that it does not collect or store prompts or completions and keeps only usage figures (number of prompts, tokens in and out). That is the provider's own statement. This service cannot verify it and does not enforce anything on top of it: no zero-retention field is sent, because Featherless does not read one. The provider serving each turn is shown with the turn.

Your own accounts are not our sub-processors. Claude Code, Codex and the Gemini CLI run inside your container. When you sign one in with your own Anthropic, OpenAI or Google account, the tool talks to that vendor directly, under the contract you have with it: your subscription, your terms, the vendor's privacy policy. Your prompt and the files the tool reads go from your container to that vendor, not through Featherless, and the operator does not see the exchange. The operator does not instruct that vendor and is not its client for this traffic; it provides the container and lets those hosts through the egress allow-list so the tools work. If you would rather send nothing to them, do not sign them in.

The operator's own use. The operator's administrator accounts also use the providers below, for the operator's own work on this service. Customer accounts cannot pick their models, and customer content is not sent to them, neither directly, nor as a fallback, nor by a background step. They are listed so that this page and the processing register agree about every company the service talks to, not because your data goes there.

Anthropic appears in both places: as a model provider only for the operator's own use, and in the first table for the error reports of §3.6, which are not customer prompts.

Memory engine. Your long-term memories are encrypted at rest with keys held in your browser: the server stores only ciphertext, wrapped keys and (in the default mode) plaintext similarity vectors, which your browser computes itself. When a memory is injected into a prompt its text is unavoidably in that prompt, and that prompt goes to Featherless like any other; zero-knowledge applies to storage at rest, and losing both your passphrase and your recovery code means the memories are unrecoverable.

Browser extension (Chrome and Firefox) and browser AI bridge, both off by default. With the extension on, the page content, screenshots and console output of tabs you act on are sent to ZeroLog and, as part of your prompt, to Featherless; a short-lived token is stored in the extension. With the browser AI bridge on, you use your own third-party AI account through an ephemeral session. ZeroLog stores no credentials, the provider's terms and any account-ban risk are yours, and the feature shows a consent screen naming that risk before it runs.

WebHook AI. If you configure a webhook, the third-party URL you name receives event data about your runs. You choose the endpoint and are responsible for it.

Push notifications (§3.7). Notifications to the ZeroLog apps run through the operator's own ntfy server in Switzerland; no push provider is involved, only Cloudflare in transit. Browser notifications (Web Push) pass the push service of your browser's vendor (Google, Mozilla, Apple or Microsoft, all USA), end-to-end encrypted, so that service sees the push address and when a message arrives, not what it says. Your browser picks that service; ZeroLog does not.

Security processing. For abuse and fraud prevention ZeroLog processes your IP address, user agent and request metadata (legal basis: overriding/legitimate interest, Art. 6(1)(f) GDPR / Art. 31(1) revDSG). These security logs are kept 30 days (aggregates 12 months). The egress denylist is compiled from public hostname lists that contain no personal data.

Art. 19 para. 4 FADP requires that the state be named, not a region, which is why no row above says "global" or "worldwide". Cloudflare is the awkward case: a CDN terminates your request wherever you happen to be, so the honest statement is the rule that decides it (nearest edge location to you) rather than a list of every country Cloudflare operates in. Cloudflare, Inc. holds an active Swiss–US certification, so Art. 16 para. 1 covers the transfer to the company itself; the operator has not separately concluded standard data protection clauses under Art. 16 para. 2 lit. d, and does not claim to have.

Where the bases come from. Under Art. 16 para. 1 FADP a transfer needs no further safeguard if the Federal Council has found the destination adequate. The list is Annex 1 to the Data Protection Ordinance (DPO, SR 235.11, per Art. 8 para. 1 DPO). Germany and Ireland are on it, so IONOS, Microsoft's Irish entity and Stripe's European entity are covered outright. The USA is on it only for organisations certified under the Swiss–US Data Privacy Framework: adequacy there is per organisation, never country-wide.

Checked against the official participant list on 31 July 2026 and again on 26 September 2026: Cloudflare, Inc. (record 5666), Google LLC (record 5780) and Stripe, LLC (record 10014) each hold an active Swiss–US certification (Cloudflare's is listed as "Active – re-certification under review"). Those three transfers therefore rest on Art. 16 para. 1.

Featherless was not found on that list in a search on 25 September 2026. So the Data Privacy Framework cannot be claimed for the transfer that carries your prompts, and claiming it would be worse than naming the real basis. That basis is Art. 17 para. 1 lit. b FADP: the disclosure is directly connected with performing the contract between you and the operator. Sending your question to a model is the service. There is no version of it that answers you without a model reading what you asked. No separate consent is collected for it, because consent that cannot be refused without losing the product is not consent. Featherless acts as the operator's processor for these requests: it answers them on the operator's instructions and account, not for its own purposes.

For users in the EU/EEA the GDPR applies to this transfer as well (Art. 3 para. 2 GDPR). The corresponding provision is Art. 49 para. 1 lit. b GDPR, and it is a derogation, not a transfer tool: European supervisory guidance (EDPB Guidelines 2/2018) reads it narrowly and does not accept it as a lasting basis for regular, systematic transfers such as this one. The same caution applies to Art. 17 FADP. Standard data protection clauses (with the Swiss addendum) with Featherless have not been concluded, and neither has a written processing agreement (Art. 9 FADP, Art. 28 GDPR). Until they are, the derogation above is the basis the operator actually relies on, and this policy does not describe it as more than that. This section will name the clauses and the date they were signed as soon as they exist.

A limit worth stating. A Data Privacy Framework certification must be renewed annually, and a lapse removes the Art. 16 para. 1 basis for that recipient. On 26 September 2026 the list gives the next due dates as 13 September 2027 (Google), 15 September 2027 (Cloudflare) and 11 May 2027 (Stripe). Cloudflare's entry reads “Active – Re-certification under Review”: the annual renewal has been submitted and is being reviewed, and the certification stays active in the meantime. The operator re-checks the list at each due date; if one lapses, this policy is corrected rather than left standing.

A change of provider is announced here first. The operator may replace Featherless or add a second provider for customer accounts (Terms §12.1). Before any prompt goes to a provider not named in this section, this section names it, with its state and the transfer basis.

For text chat inference, assume that your prompt leaves Switzerland and goes to the USA. The separately requested Infomaniak image generation is described in §3.2.1. If that is not acceptable for a particular piece of information, do not put it in a prompt, and consider an anonymous chat, which keeps the stored copy unreadable here even though the model still has to see the question.

No data is sold, rented, or shared for advertising.

6. Anonymous chats (zero-knowledge)

Anonymous chats are encrypted in your browser before they reach the server. The server stores only ciphertext plus the billing counters (tokens and cost) needed to charge you.

Consequences, stated plainly:

• The operator cannot read them, and cannot be compelled to produce their content, because the key never reaches the server.
• The operator cannot recover them. Lose the passphrase and the content is permanently gone.
• They cannot be moderated. Prohibited use is still prohibited (Terms §4). It simply cannot be detected there, and enforcement rests on other signals.
• Prompt content is still sent to the inference provider (Featherless) to get an answer. Encryption protects storage on this server, not the fact that a model must see the prompt.

7. Cookies

Three. None of them is used for tracking or advertising, and none needs a consent banner.

All three set HttpOnly, Secure and SameSite=Lax, and the __Host- prefix means a browser accepts them only from this exact origin over HTTPS. The plain-language summary further down this page says exactly what the third one records and what it deliberately does not.

Local storage in your browser holds interface preferences (theme, language, layout) and, for anonymous chats, key material that never leaves your device.

8. How long data is kept

On account deletion, personal data is deleted or anonymised, except where retention is legally required (billing records above) or an abuse investigation is open.

9. Your rights

Under the FADP and, where applicable, the GDPR, you may request:

• Access: a copy of your data
• Rectification: correction of inaccurate data
• Erasure: deletion (subject to legal retention)
• Restriction and objection: including objection to processing based on legitimate interest
• Portability: your data in a machine-readable form
• Withdrawal of consent: for anything you consented to, with future effect

Write to info@zerolog.ch. A response follows within 30 days.

An honest limitation: most accounts carry no email address, and where none is on file identity cannot be verified by email. Requests are honoured by proving control of the account (logging in). If you cannot log in, the operator cannot safely identify you as the account holder and may have to refuse. Refusing is the privacy-preserving answer, since the alternative is handing your data to whoever asks.

Complaints. Switzerland: Federal Data Protection and Information Commissioner (FDPIC), Bern. EU/EEA: your national supervisory authority.

10. Security

Passwords are hashed with bcrypt and never stored in clear. Traffic is TLS-encrypted. Containers run in a sandbox (gVisor) with a restricted syscall profile and a network egress allow-list. Access to the server is limited to the operator.

Stated plainly: this is a service run by one person on self-hosted hardware. Reasonable measures are taken, but no absolute security can be promised, and you should not store data here whose exposure you could not tolerate.

11. Children

The service is not directed at children under 16 and accounts require the user to be 16 or older (Terms §3.1). No data is knowingly processed from children under that age.

12. Changes

This policy may be updated. The version and date at the top always reflect the current text. Material changes are announced in the app.

Terms of Service

Version 1.3, applies to an account from the moment it accepts version 1.3 at sign-up. For an account that accepted an earlier version it applies 14 days after the notice in the app or on the site (§12.2); until then the version that account accepted applies. Accepting these is required to create an account. Section 4 is the Acceptable Use Policy.

1. What this is

These Terms govern your use of ZeroLog (zerolog.ch and its subdomains), a self-hosted AI workspace that gives you chat access to third-party AI models, real Linux containers, public network ports, and autonomous agents that can run commands on your behalf.

By creating an account or using the service you accept these Terms. If you do not accept them, do not use the service.

The service is operated by a single natural person in Switzerland, not a company. It is provided in the operator's own name and on the operator's own hardware.

2. The service, described honestly

ZeroLog gives you:

• AI chat against open-weight models served by a third-party inference provider. For customer accounts that is currently one provider, Featherless (USA), and the model picker shows only models it serves. Which provider this is, and which models it offers, can change (§12.1); the Privacy Policy always names the current one with its country. If Featherless fails, the request fails: it is not passed to another provider. Your prompts leave this server and are processed by that provider.
• Your own AI accounts. You may sign the Claude Code, Codex or Gemini command-line tools in your container into your own account with that vendor. That use runs under your contract with the vendor, at your cost and under its terms, not under a contract between the operator and the vendor. The operator provides the container and the network path, and is not responsible for what the vendor does with it.
• Linux containers running under a sandbox (gVisor). You get root inside your own container.
• Public ports: you may expose a service on a *.zerolog.ch hostname. Anything you publish there is reachable by the public internet and is published in the operator's name and from the operator's IP addresses.
• Autonomous agents (/goal, scheduled tasks) that continue to run commands without you watching, on instructions you gave.
• Outbound network access via an egress gateway, which may route through infrastructure in other countries.

This is a hobby-scale service run by one person. There is no uptime guarantee, no support guarantee, and no guarantee that your data survives. See §9 and §10.

3. Account and eligibility

3.1 You must be at least 16 years old. If you are under 18, you may only use the service with the consent of a parent or legal guardian.

3.2 Registration requires a username and a password. No email address is collected. This has a consequence you must accept: there is no password reset. If you lose your password, you lose your account and its contents.

3.3 You are responsible for everything that happens under your account, including actions taken by agents you started and by anyone you share a container or workspace with.

3.4 One person may not operate accounts to evade a suspension, a quota, or a spend limit.

4. Acceptable Use Policy

This section is the core of these Terms. It exists because the operator's name, hardware, IP addresses and legal identity stand behind everything you do here.

You must not use ZeroLog, its containers, its agents, its network or its models to:

4.1 Attack, disrupt or overload anyone

• Denial-of-service or distributed-denial-of-service attacks of any kind, including tests, simulations, demonstrations, stress tests and "load tests" against systems you do not own.
• Traffic floods, amplification or reflection attacks, or any traffic intended to exhaust another party's bandwidth, connections, CPU or memory.
• Operating, hosting or controlling a botnet, command-and-control server, stresser/booter service, or a proxy or relay used to conceal attack traffic.
• Port scanning, vulnerability scanning, fuzzing, brute-force or credential-stuffing attacks against systems you do not own and do not have written authorisation to test.

4.2 Create or distribute malicious software

• Writing, compiling, building, packing, obfuscating, testing, hosting or distributing malware, including ransomware, wipers, worms, trojans, rootkits, bootkits, keyloggers, info-stealers, banking trojans, RATs, droppers, loaders and exploit kits.
• Developing or weaponising exploits for vulnerabilities in systems you do not own.
• Building tooling whose primary purpose is to defeat antivirus, EDR, sandbox detection or other security controls.
• Hosting or distributing stolen credentials, stolen data, card data, or dumps.

On security research: defensive security work, CTF challenges, malware analysis in an isolated container, and testing of systems you demonstrably own or are contracted to test are permitted. The line is authorisation and intent, not subject matter. If you are doing security work, be prepared to evidence your authorisation on request. Automated scanning may flag your activity; if it does, the burden is on you to show the work was authorised.

4.3 Gain or attempt unauthorised access

• Accessing or attempting to access any account, container, workspace, network, database or system that is not yours.
• Escaping or attempting to escape the container sandbox, the hypervisor, or the egress controls.
• Circumventing quotas, spend limits, rate limits, the egress allow-list, or any access control of this service.
• Intercepting, sniffing or altering traffic that is not yours.

4.4 Commit crimes or infringe rights

• Any activity unlawful under Swiss law or the law that applies to you.
• Fraud, phishing, identity theft, social engineering, or impersonating a person or organisation.
• Producing fake identity documents, forged records, counterfeit goods, or deceptive material intended to pass as genuine.
• Infringing copyright, trademarks, patents, trade secrets, or personality rights, including hosting or distributing pirated media or software.
• Unsolicited bulk messaging (spam) of any kind, and harvesting contact data for that purpose.

4.5 Produce or handle prohibited content

• Child sexual abuse material: created, stored, transmitted, processed or generated. This is reported to the authorities without notice to you.
• Content that incites, promotes, organises or provides operational assistance to terrorism, violent extremism or serious violence against people.
• Instructions for producing weapons, explosives, or chemical, biological, radiological or nuclear agents intended to cause harm.
• Non-consensual intimate imagery, including synthetic imagery of real people.
• Targeted harassment, stalking, doxxing or threats against a person.
• Racial, ethnic, religious or sexual-orientation hatred and discrimination, and the denial or gross trivialisation of genocide or other crimes against humanity (Art. 261bis of the Swiss Criminal Code). Published from this service, that content makes the operator its publisher, which is why it is named here rather than left to the general prohibition above.

4.6 Abuse the models

• Attempting to circumvent the safety controls of a model or of this service in order to obtain output that is otherwise prohibited by this section ("jailbreaking").
• Reselling or redistributing model access, or operating the service as an inference proxy for third parties, unless expressly agreed in writing.
• Automated scraping or bulk extraction of model output for the purpose of training a competing model, where the upstream provider's terms forbid it.

4.7 Abuse the resources

• Cryptocurrency mining, coin-hashing, or proof-of-work computation of any kind.
• Deliberately wasteful workloads whose purpose is to consume capacity rather than to produce a result.
• Using the egress gateway to anonymise activity that would breach this section.

4.8 Sanctions and export control

The operator supplies compute, model access and cross-border network egress. You must not use the service if you are subject to Swiss, EU, UK or US sanctions, nor make it available to a person or entity that is, nor use it in or for the benefit of a comprehensively sanctioned territory. You are responsible for any export-control obligation that attaches to what you build or transmit here.

4.9 Public ports carry extra duties

Anything you expose on a *.zerolog.ch hostname is published in the operator's name. You must not publish there: malware distribution points, phishing pages, illegal marketplaces, CSAM, or infringing content. Abuse complaints about a published port land with the operator, and will result in immediate closure of that port.

5. You are responsible for your agents

ZeroLog can run agents that continue working autonomously for hours on a goal you set.

An agent's actions are your actions. You accept full responsibility for everything an agent does under your account, including outcomes you did not specifically foresee. "The AI did it" is not a defence, and the operator does not accept it as one. If you cannot supervise an agent, do not start it.

The same applies to anyone you invite to a container or workspace: their actions under your resources are your responsibility toward the operator.

6. Enforcement

6.1 Investigation. The operator may investigate suspected breaches of §4, including inspecting container contents, network flows and logs where technically possible. Anonymous (client-side encrypted) chats cannot be inspected. See the Privacy Policy.

6.2 Immediate suspension. The operator may suspend or terminate your account, stop your containers, close your ports and cut your network access immediately and without prior notice where there is a reasonable suspicion of a breach of §4, or where your use creates a security risk, a legal risk, or a risk to the service or other users. There is no obligation to warn first.

6.3 Preservation and disclosure. Where required by Swiss law or by a lawful order from a Swiss authority, the operator will preserve and disclose data. In cases involving CSAM or an imminent threat to life, the operator will report to the authorities proactively.

6.4 Costs. Where your breach causes the operator direct costs (abuse handling, IP reputation damage, blocklisting, upstream provider penalties, legal fees), those costs are recoverable from you under §8.

6.5 Termination for breach. Subscription fees for the current period are not refunded where an account is terminated under §4. Unused prepaid credit is refunded less the operator's documented costs arising from the breach (abuse handling, upstream penalties, legal costs). Credit is not forfeited as a penalty: a Swiss court reduces an excessive contractual penalty in any case (Art. 163 para. 3 CO), so this states what the operator would actually be able to keep.

7. Payment, credit and refunds

7.1 Plans buy hardware capacity (container size, count, ports). Model usage is paid separately from credit, priced per §7.2.

7.2 Credit is prepaid, is consumed as you use models, and is not exchangeable for cash while your account is open: it pays for model usage and nothing else. On termination it is refunded under §12.3. Payments are processed by Stripe; the operator does not receive or store your card details. Topping up carries a 3% currency buffer and no service fee, applied to the conversion into credit and shown in the quote before you pay. Token prices are the inference provider's rate plus a service margin, currently 2%. The margin is already included in every price the app shows (the model picker, the catalogue, and the cost strip under each reply), so the price shown is the price charged. Usage billed against your own provider API key carries no margin, because that spend never passes through the operator.

7.3 Prices and model rates may change. Rate changes for models follow the upstream provider and can take effect without notice, because they are not the operator's prices.

7.4 You are responsible for spend you cause, including spend caused by an agent running autonomously. Spend limits are a convenience, not a guarantee; do not rely on them as your only control.

7.5 Statutory withdrawal rights, where they apply to you as a consumer, are unaffected.

8. Your indemnity to the operator

This clause is the reason these Terms exist.

You will defend, indemnify and hold harmless the operator against any claim, demand, proceeding, loss, damage, fine, penalty, and reasonable legal and abuse-handling costs arising out of or connected with:

(a) your use of the service, including anything done by an agent under your account or by any person you gave access to; (b) your breach of these Terms, and in particular of §4; (c) content you generate, store, publish or transmit through the service; (d) your infringement of a third party's rights; and (e) any claim by a third party that your activity harmed them, their systems or their data.

Limits on this indemnity. Where you are a consumer, this obligation is capped at the same amount that limits the operator's liability to you under §10.2. The two sides are deliberately symmetrical: a duty on you far larger than the operator's own ceiling is the imbalance Art. 8 UCA (UWG) exists to strike, and a clause that is struck protects nobody. It does not apply where the loss was caused by the operator's own intent or gross negligence, nor to the operator's own regulatory fines (Art. 20 CO: an agreement to shift somebody else's penalty onto you is void, and including it would put the rest of this clause at risk). It applies in full where you use the service in a professional or commercial capacity, where Art. 8 UCA does not apply.

This survives termination of your account.

9. No warranty

The service is provided "as is" and "as available", with no warranty of any kind, express or implied, including merchantability, fitness for a particular purpose, non-infringement, availability, or accuracy of model output.

Specifically not warranted:

• that the service will be available, uninterrupted, or performant;
• that your data, containers, files or chat history will survive, so keep your own backups;
• that model output is correct, lawful, safe, non-infringing or fit for any purpose;
• that a sandbox or an isolation boundary is impenetrable;
• that a third-party provider (inference, payment, network) will continue to be available.

AI output is not advice. Output from this service is not legal, medical, financial, tax or professional advice, and must not be relied on as such.

10. Limitation of liability

10.1 To the fullest extent permitted by Swiss law, the operator is not liable for indirect, incidental, consequential or special damage, lost profit, lost data, business interruption, or reputational harm.

10.2 The operator's aggregate liability arising from or connected with the service is limited to the total amount you paid in the twelve (12) months before the event giving rise to the claim, or CHF 50, whichever is greater.

10.3 What cannot be excluded. Nothing in these Terms excludes or limits liability for intent or gross negligence (Art. 100 CO), for personal injury or death, or any other liability that cannot be limited under mandatory Swiss law. Where you are a consumer, mandatory consumer protections of your country of residence are unaffected.

10.4 The operator is not liable for the acts of third-party providers (inference, payment, network, hosting), nor for what other users do.

11. Your content and data

11.1 Your content stays yours. You grant the operator only the technical licence needed to run the service: to store, transmit, process and display your content for the purpose of providing it to you, and to transmit prompts to the inference provider that serves the model you use.

11.2 The operator does not use your content to train models and does not sell it.

11.3 On account deletion, your data is deleted as described in the Privacy Policy. Backups and legally required records may persist for a limited period.

11.4 Anonymous chats are encrypted in your browser. The operator cannot read, recover, export or restore them. If you lose the passphrase, the content is gone permanently, and no support request can change that.

12. Availability, changes and termination

12.1 The operator may change, restrict or discontinue any feature at any time, including discontinuing the service entirely. Reasonable notice will be given where feasible; where a provider, a cost, or a legal obligation forces the operator's hand, it may not be.

This includes which inference provider serves the models and which models are offered. No particular provider, model or number of models is promised. Two limits apply to a change of provider. First, before any prompt goes to a new provider, the Privacy Policy names it, with its country and the basis for the transfer; a provider change never happens silently in the data flow, even where it happens without advance notice in the product. Second, credit you have already paid for is not lost when a model disappears: it stays usable on the models that remain, and §12.3 applies if you would rather leave.

12.2 These Terms may be amended. Material changes are announced in the app or on the site at least 14 days before they take effect, and the version you accepted is recorded on your account. Continued use after the effective date is acceptance of the new version. If you do not accept, stop using the service and request deletion before that date; credit is refunded under §12.3.

12.3 You may terminate at any time by deleting your account. Unused prepaid credit is refunded on request; the operator may deduct amounts already owed. (§6.5 covers the different case of termination for breach.) Subscription fees for the current period are not refunded.

13. Governing law and venue

13.1 These Terms are governed by Swiss law, excluding its conflict-of-law rules and the CISG.

13.2 The place of jurisdiction is Baden, Canton of Aargau, Switzerland.

13.3 If you are a consumer, this does not bind you. Art. 32 of the Swiss Civil Procedure Code gives you the choice of the court at your own domicile or at the operator's, and Art. 35 para. 1 lit. a ZPO makes that right one you cannot waive in advance. If you live in the EU, Iceland or Norway, Art. 15-17 of the Lugano Convention give you the same protection. §13.2 therefore applies in full only where you use the service commercially.

13.4 The choice of law in §13.1 has the same limit. Where Art. 120 of the Swiss Private International Law Act (IPRG) applies to you as a consumer, the law of the state of your habitual residence governs instead, and a choice of law is excluded; where EU law applies to you, the mandatory consumer protections of your residence remain applicable notwithstanding §13.1 (Art. 6 para. 2 Rome I Regulation).

14. Miscellaneous

14.1 If a provision is invalid, the rest stays in force and the invalid provision is replaced by one closest to its economic intent.

14.2 No rights may be transferred by you without consent. The operator may transfer this agreement as part of a transfer of the service, with notice.

14.3 Failure to enforce a provision is not a waiver of it.

14.4 These Terms are published in English only, and the English text is the binding version. Other parts of this site are available in German; these Terms are not.

Report abuse: info@zerolog.ch. Include the hostname, IP, timestamp (with timezone) and evidence. Abuse reports about *.zerolog.ch are acted on.

Privacy at a glance

A plain-language summary of the Privacy Policy above, under the Swiss Federal Act on Data Protection (FADP). Where this summary and the full policy differ, the full policy governs. Last updated: 27 September 2026.

About the name. ZeroLog means we do not ask for more than the service needs: no email, no phone number, no name at registration, and no stored IP addresses. It does not mean you are anonymous, and it does not mean nothing is written down — ordinary chats are saved so your history survives, and anonymous chats are the mode where the server genuinely cannot read them. Both are described below, in those words.

Paying identifies you. Registration is name-free, but topping up credit is not: card payments and Google Pay carry your name and billing address to Stripe, and the operator can see them there. If you pay, you are identifiable — by us, by Stripe and by your bank. Only never-paying accounts stay unnamed, and even they are not untraceable.

Controller

Gian-Luca Luongo, Dorfstrasse 77, 5430 Wettingen, Switzerland · info@zerolog.ch

What is processed

• Account: a username, a password hash (bcrypt) and the time you registered. No email address is collected — there is no field for one, which also means there is no password-reset by mail.
• Chats and messages: stored in a SQLite database on this server, so your history is there when you come back. Anonymous chats are the exception: their content is encrypted in your browser and the server holds only the ciphertext and the billing counters. Nobody operating this service can open them, and losing the passphrase loses the history.
• Containers: the files you create live in a workspace directory on our hardware, and on the NAS while a container is paused. They are yours, they are not read as a matter of routine, and deleting a container deletes its workspace. The one exception is stated in the Terms and not hidden here: when a breach of §4 is being investigated, the operator may inspect container contents, network flows and logs. There is no technical barrier to that — only the undertaking not to do it otherwise.
• Vault: credentials you store are encrypted with AES-256-GCM and never written to logs in clear text.
• Usage and billing: per-request token counts and cost, plus the plan you are on. Needed to bill accurately and to show you what you spent.
• IP addresses are never written to the database. They are held in memory to rate-limit sign-ins and registrations. They do appear transiently in server logs — failed logins, security events — which the system journal rotates away. So "not stored" is true of your account and your history, and not true of the logs; saying it without that qualification would overclaim.
• Error and crash reports: the ZeroLog web interface, the ZeroLog Android app and ZeroLog Code report errors and crashes here, so faults can be fixed: an error code, a shortened and redacted message, where in the program it happened, the version, the platform, the browser and the page. There is no field for your account, chat content or IP address; email addresses, tokens and identifiers are removed by pattern before storage, though an unusual spelling can slip through. The IP only throttles floods in memory. Reports of the same kind are merged; once an error has not occurred for 30 days, it is deleted at the next cleanup, which runs as new reports arrive. An automated check on an Anthropic model (USA) reads the redacted entries. Details and the limits of this rule are in §3.6 of the policy above.
• Push notifications: off until you switch them on. The ZeroLog apps get them from our own ntfy server in Switzerland (ntfy.zerolog.ch), not from Google or Apple: reply finished or failed, job finished or waiting, credit low, new sign-in, and on request a change to the legal texts. Stored is one random channel name per account, until you switch push off, make a new channel or delete the account. A notification carries only a fixed text and at most a chat or job number, never content, names or amounts; the ntfy server keeps it 24 hours. Anyone who knows the channel name can read along, so you can replace it at any time. Browser notifications in the web interface pass your browser vendor's push service (Google, Mozilla, Apple or Microsoft, USA) end-to-end encrypted. Details in §3.7 of the policy above.

Who else sees anything

• Featherless (USA) runs every model a customer account can pick, and the steps the service runs for you on its own (condensing a long chat, memory suggestions, describing an image). The model picker shows nothing else. If Featherless fails, you get an error: the request is not sent to another provider, and an empty balance does not switch you to a free model elsewhere. Featherless says it does not store prompts or completions, only usage counts; that is its statement, which we cannot check. This transfer is unavoidable: inference happens on their machines, and it is the one the service cannot work without.
• Microsoft (Ireland, Microsoft 365) delivers the emails the service sends, if you add the optional email address to your account, and holds the mailbox behind info@zerolog.ch.
• IONOS (Germany) carries the outbound traffic from your containers. It sees the connections a container makes, not the contents of your chats, and it exists so that traffic leaves from a stable address instead of ours.
• Infomaniak (Switzerland) receives image prompts only when you request a new image in the separate image engine. Images and minimal request/billing metadata are stored separately; raw form prompts are not stored in those request records. Design Engine stays image-free.
• Google (USA) receives an account identifier if you link Google sign-in, and nothing else. Customer accounts have no Gemini models, and images are not described by Google. Link no Google account, and Google receives nothing from us.
• Your own accounts are yours, not our sub-processors. If you run Claude Code, Codex or the Gemini CLI inside your container and sign it in with your own account, the tool talks to Anthropic, OpenAI or Google (all USA) directly, under the contract you have with that vendor. What you type and the files the tool reads go there, not through Featherless, and we do not see the exchange. Don't sign them in and nothing is sent.
• The other providers in the policy (DeepInfra, OpenRouter, Requesty, Mistral, Groq, Cerebras, SambaNova, NVIDIA, Fireworks, Together, Ofox, SiliconFlow, Replicate, fal.ai) are used only by the operator's own administrator accounts, for the operator's own work. Customer content does not go to them: not directly, not as a fallback, not by a background step. They are named so that nothing the service talks to is left out.
• Why this is allowed. For a transfer abroad the FADP wants either adequate protection in the destination state (Art. 16 para. 1, the list is Annex 1 to the Data Protection Ordinance) or an exception under Art. 17. Both apply here, but not the same one to every recipient.
  
  Adequate protection (Art. 16 para. 1). Germany and Ireland are on the list, so IONOS (container egress), Microsoft's Irish entity and Stripe's European entity are covered outright. The USA is on it only for organisations certified under the Swiss–US Data Privacy Framework — adequacy there is per organisation, never country-wide. Checked on 31 July 2026 and again on 26 September 2026: Cloudflare, Inc., Google LLC and Stripe, LLC each hold an active Swiss certification, so the transfer to each company rests on Art. 16 para. 1. The operator has not separately concluded standard data protection clauses with any of them and does not claim to have; requests from Switzerland are normally terminated at a Swiss Cloudflare edge in any case.
  
  Featherless was not found on that list (searched 25 September 2026). So the Framework cannot be claimed for the transfer that carries your prompts. The basis is Art. 17 para. 1 lit. b FADP: the disclosure is directly connected with performing the contract between you and us. Answering you is sending your question to a model. Standard data protection clauses and a written processing agreement with Featherless have not been concluded, and we do not claim otherwise. Assume that anything you type into a prompt leaves Switzerland for the USA.
  
  The separate image engine uses Infomaniak in Switzerland. Its advertised retention policy is a provider statement, not independently verified zero data retention. Leonardo and OpenRouter image generation are disabled. Google sign-in remains optional under the basis disclosed above.
• Stripe (Ireland and USA) handles payments. Card details never reach ZeroLog; we store the amount, the time and Stripe's reference.
• Cloudflare (USA — the company's seat; your request is terminated at the edge location nearest you, from Switzerland normally Zurich or Geneva) carries the connection as CDN and tunnel, so it sees request metadata in transit. The origin server's address is never exposed.
• No analytics, no trackers, no external fonts or scripts — including on this page, which loads only same-origin stylesheets and the language switcher and calls no API at all.

Cookies

One for signing in, and only once you sign in: __Host-mh_session (HttpOnly, Secure, SameSite=Lax). It holds a random session token, does nothing but keep you signed in, and expires after 30 days. Signing out deletes the session on the server. This page sets no cookies at all.

One more, if you arrive through a link we posted. When the operator answers a question in a public forum, the link he leaves carries a short name for that link, not for you. Following it records three things on this server: which link it was, the time, and the host of the page you came from — reddit.com, never the path or the query, because those carry search terms and titles. No IP address is written down, and nothing about your browser, so there is nothing here to build a profile from. The cookie that comes with it, __Host-mh_ref (HttpOnly, Secure, SameSite=Lax), holds that link's name and nothing else, expires after seven days and never lasts longer than 30, and identifies nobody — everyone arriving through the same link gets the identical value. No third party is involved, and these records are deleted on the same retention schedule as everything else in that tool, 30 days by default.

How long

Account data, chats and workspaces are kept until you delete them or ask for the account to be removed. Billing records are kept as long as Swiss accounting law requires. Deleting a chat or a container deletes its content; aggregate usage totals are retained for accounting and are not linked to message content.

Your rights

Access, correction, deletion and a copy of your data — by email to the controller above. You can export your chats yourself at any time from the app, in Markdown, JSON, HTML or plain text.

Impressum / Legal Notice

Operator

Gian-Luca Luongo Dorfstrasse 77 5430 Wettingen Switzerland

Email: info@zerolog.ch

Sole proprietor (natural person). Not entered in the commercial register; no company, and no VAT number, unless and until the statutory thresholds are met.

Responsible for content: Gian-Luca Luongo, address as above.

Service

ZeroLog is a self-hosted AI workspace at zerolog.ch and its subdomains, providing chat access to third-party AI models, Linux containers, and autonomous agents.

Legal documents

• Terms of Service, including the Acceptable Use Policy
• Privacy Policy

Reporting abuse

Abuse originating from zerolog.ch or any *.zerolog.ch hostname:

info@zerolog.ch

Please include the hostname or IP address, a timestamp with timezone, and evidence (log excerpt, headers, packet capture). Reports are acted on, and confirmed abuse results in immediate suspension of the responsible account.

Notice of unlawful content

If you believe content hosted here infringes your rights or is unlawful, send a notice to the address above identifying the content, its URL, the legal basis of your claim, and your contact details. Unlawful content is removed once substantiated.

Liability for content

The content of this service is created with care, but no warranty is given for its accuracy, completeness or timeliness. Content generated by AI models is machine-generated and may be wrong; it is not advice of any kind. See Terms of Service §9.

Liability for links and user content

This service hosts content created by its users, including containers and services published by users on *.zerolog.ch subdomains. Such content is not the operator's content and is not monitored in advance. Responsibility rests with the user who published it. On becoming aware of unlawful content, the operator removes it promptly.

External links point to third-party content over which the operator has no control and for which no liability is accepted.

Copyright

Unless stated otherwise, the design, text and source code of this service are the operator's property. User content remains the property of the respective user.

Dispute resolution

The operator is not obliged and not willing to participate in dispute-resolution proceedings before a consumer arbitration board.

Governing law: Swiss law. Venue: Baden, Canton of Aargau, subject to mandatory places of jurisdiction for consumers.

This notice is deliberately excluded from search-engine indexing (X-Robots-Tag: noindex) while remaining directly reachable without a login, as the law requires: reachable, not searchable.