1. Who we are
Blackline Stencil, trading publicly as BLACKLINE by UNIFY (“BLACKLINE”, “we”, “us”), is an AI-assisted tattoo stencil service based in Bathurst, New South Wales, Australia. Our ABN is 92 706 350 089. Privacy questions and requests can be sent to blacklinestencil@gmail.com.
2. Information we handle
Depending on how you use BLACKLINE, we may handle:
- your verified BLACKLINE sign-in email and optional display name;
- reference images, generated stencils and the print or production settings you choose;
- plan, free-stencil use, rollover balance, purchased-credit balance, consent-version and generation-status records;
- Stripe customer, subscription and payment-status identifiers;
- support messages sent to the BLACKLINE email address;
- account-linked one-off credit-pack balances and limited pseudonymous anti-abuse identifiers;
- a necessary pseudonymous blackline_guest browser cookie, retained for up to 12 months, that distinguishes anonymous visits for privacy-minimised service analytics and anti-abuse controls and preserves recovery of historical anonymous credit packs;
- limited browser, device and network signals processed by Cloudflare Turnstile to distinguish people from automated sign-in abuse; and
- limited pseudonymous service events such as a visit, sign-in, checkout, completed purchase, completed stencil or file download.
The free-stencil record is attached to the verified BLACKLINE account so the same email receives one free completed stencil per UTC calendar month across devices. Where BLACKLINE uses a network-derived security identifier, it stores a short-lived digest rather than the raw network address used to create it.
The pseudonymous browser cookie contains a random token, not an email address, artwork or payment-card detail. New credit packs require verified email sign-in and remain attached to that BLACKLINE account rather than relying on this cookie.
Service events are used to understand whether BLACKLINE works from arrival through fulfilment. Analytics does not receive uploaded artwork, generated images, filenames, prompts, sign-in email addresses or payment-card details. Session recording and automatic capture of clicks, forms and typed content are not used.
3. Client artwork and consent
Images of identifiable people can be personal information and may reveal sensitive information. Before processing a non-sample image, the uploader must confirm that they own or may use it and have any consent required from the identifiable person. Do not upload client photography merely because it is available online or in a message thread.
4. AI processing
Reference images and instructions are sent securely to OpenAI's image API to create the stencil. OpenAI states that API inputs and outputs are not used to train its models by default. For the image-edit endpoint, application-state retention is listed as none, while abuse-monitoring data may be retained for up to 30 days by default. Certain content may be retained for safety or legal review. OpenAI's current controls are described in its API data-controls guide.
BLACKLINE creates an AI-assisted interpretation, not an exact copy. It may simplify, omit, move or reinterpret details to make the design clearer and easier to read as a tattoo. Always compare the complete stencil with the original and make any artist-led corrections before transfer or tattooing. BLACKLINE provides print-preparation tools and requires the artist to verify the complete output against the source. The tattoo artist remains responsible for confirming consent and deciding whether an output is suitable to transfer.
5. When images are saved
To finish processing when a page is closed and recover the result, BLACKLINE keeps the uploaded working reference, generated drafts and result in private working storage for up to 24 hours after upload. These files are accessible only through the signed-in account. Access ends at expiry; automatic cleanup removes the files, with deletion retried after a storage outage. Completed or failed working jobs can also be deleted using Delete working files. This does not add the artwork to a personal gallery. Pro members may deliberately press Save current project. That action stores the source, stencil, print settings and Reference Overlay controls in private storage linked to the signed-in account. The overlay does not create another stored image: a Reference Overlay PNG is composed locally in the member's browser only after they deliberately prepare it. Nothing is added to the vault automatically.
A Pro member can delete individual vault projects. Account or privacy deletion requests can also be made by email. We retain minimal billing, security and transaction records where reasonably necessary or legally required.
6. Service providers and overseas processing
BLACKLINE uses OpenAI and Cloudflare-hosted infrastructure for the app, private storage and Turnstile bot protection, Supabase for passwordless email identity, Stripe for billing, PostHog for privacy-minimised service analytics, and Google for support email. BLACKLINE analytics records only a small allowlist of service events, such as a site visit, sign-in, completed stencil, download or purchase. It does not send artwork, prompts, filenames, email addresses or payment-card details to PostHog, does not build person profiles, and disables location enrichment. These providers may process information outside Australia under their own security, privacy and legal obligations. BLACKLINE does not receive or store complete payment-card details; Stripe handles them directly.
7. Security and retention
We use access checks, private storage, encrypted transport, ownership controls, upload limits and server-side quotas. No online system is risk-free. Keep your sign-in secure, delete projects no longer needed and avoid uploading unnecessary personal or sensitive information.
Vault images remain until deleted by the member or removed following a valid request. Browser and anti-abuse records are short-lived where practical. Account, usage, consent, billing and support records are retained only as long as reasonably necessary for service delivery, security, disputes and legal obligations, then deleted or de-identified where practical.
8. Access, correction, deletion and complaints
You may ask what personal information BLACKLINE holds about you, request a correction, ask for deletion, withdraw optional consent or make a privacy complaint by emailing blacklinestencil@gmail.com. We may need to verify the request and may retain limited information where the law requires it. If a concern is not resolved, you may be able to contact the Office of the Australian Information Commissioner.
9. Age and policy changes
BLACKLINE accounts are intended for users aged 18 or older. Do not upload an identifiable minor without lawful authority and appropriate parent or guardian consent. We may update this policy as BLACKLINE changes. Material changes will be identified by a new date and, where appropriate, an in-product notice.