Privacy Policy

Helix Industries (“we”, “us”, “our”) values your privacy. This Privacy Policy explains how we collect, use, store, and share personal information when you use our website and service for registration, login, and account management.

We collect and process personal data — including your email address, account activity, and technical/security data described below — whenever you sign in, use account features, or join our mailing list. We share limited data with the third-party service providers listed below solely to operate the service.

Information we collect

We collect information needed to create and secure your account, prevent abuse, and support the service:

• Email address
• IP address
• Signup and login timestamps
• Authentication metadata such as session creation and verification status
• Device/browser metadata needed for security and bot prevention
• Turnstile or bot verification tokens for anti-abuse checks

Why we collect it

We collect this information for the following purposes:

• To create and manage user accounts
• To confirm your identity through OAuth providers such as Google
• To enable login and account recovery via OAuth
• To prevent fraudulent or automated signups
• To enforce rate limiting and protect the service from abuse
• To troubleshoot and secure the application

Google sign-in and user data

When you sign in with Google, we may receive your email address, basic profile information such as your name, and authentication data required to confirm your identity. We use this information only to create or access your account, allow secure sign-in, and provide the features of the service. We do not use your Google account data for advertising, unrelated profiling, or resale.

How we use it

• Authentication and account access via OAuth providers
• Email verification and security flows
• Preventing spam, bot signups, and fraud
• Monitoring and enforcing signup/login rate limits
• Improving system security and reliability

Security measures

• Using secure connections (HTTPS) to transmit data
• Verifying Turnstile tokens on the server before signup
• Using server-side controls and a secure service role key for database inserts
• Storing only necessary security log data
• Applying rate limits to reduce abuse

Third parties we use

We share limited personal data with the following third-party service providers, solely to operate the site:

• Supabase — stores user accounts, emails, authentication data, and puzzle progress records
• Cloudflare Turnstile — used for bot verification and anti-abuse checks
• Brevo — stores the email addresses of users who opt in to our mailing list, and sends mailing list communications on our behalf
• Upstash (Redis) — briefly stores rate-limit counters (IP address and email address) to prevent spam and abuse of forms on the site
• Vercel Analytics — collects anonymized usage analytics, and only runs if you accept analytics cookies via our cookie consent banner

We do not sell your personal data.

Data retention

We retain data only as long as necessary for account operation, security monitoring, abuse investigation, and legal or compliance requirements. Signup and login logs may be retained longer for fraud prevention and security auditing.

Your rights

Depending on your jurisdiction, you may have the right to access the data we hold about you, including signup and login records such as IP address and associated signup attempt metadata. You may also correct inaccurate personal data, request deletion of your account and associated data, and withdraw consent for processing where applicable.

To exercise these rights, contact us through the support channels listed on the site.

Cookies and tracking

We may use cookies and similar technologies for session management, authentication, security checks, and bot verification with Turnstile.

Mailing list consent

If you complete Puzzle 3 and opt in through your account settings, we may use your email address to send optional announcements, updates, and offers.

You may unsubscribe at any time using the link in our emails or by updating your mailing preferences in your account settings.

Changes to this policy

We may update this policy from time to time. The latest version will be published on our site.

Contact

If you have privacy questions or requests, please contact us through the support channels provided on the website.