The Helix Client Access System (HCAS) is now available to all registered users. This release introduces improved navigation and expanded account management features.
Users are advised to sign in using Discord, Google, or Apple OAuth to access the new portal interface. No password reset is required for this update.
Deployment Date: 03/04/2003 09:00 GMT
All Helix Industries network services are currently functioning within normal parameters. No service degradation has been detected across core infrastructure nodes.
Routine monitoring systems indicate stable performance across all active regions. System load remains within expected thresholds for current operational capacity.
Last Updated: 03/04/2003 14:32 GMT
Privacy Policy
Helix Industries (“we”, “us”, “our”) values your privacy. This Privacy Policy explains how we collect, use, store, and share personal information when you use our website and service for registration, login, and account management.
We collect and process personal data — including your email address, account activity, and technical/security data described below — whenever you sign in, use account features, or join our mailing list. We share limited data with the third-party service providers listed below solely to operate the service.
Information we collect
We collect information needed to create and secure your account, prevent abuse, and support the service:
- Email address
- IP address
- Signup and login timestamps
- Authentication metadata such as session creation and verification status
- Device/browser metadata needed for security and bot prevention
- Turnstile or bot verification tokens for anti-abuse checks
Why we collect it
We collect this information for the following purposes:
- To create and manage user accounts
- To confirm your identity through OAuth providers such as Google
- To enable login and account recovery via OAuth
- To prevent fraudulent or automated signups
- To enforce rate limiting and protect the service from abuse
- To troubleshoot and secure the application
Google sign-in and user data
When you sign in with Google, we may receive your email address, basic profile information such as your name, and authentication data required to confirm your identity. We use this information only to create or access your account, allow secure sign-in, and provide the features of the service. We do not use your Google account data for advertising, unrelated profiling, or resale.
How we use it
- Authentication and account access via OAuth providers
- Email verification and security flows
- Preventing spam, bot signups, and fraud
- Monitoring and enforcing signup/login rate limits
- Improving system security and reliability
Security measures
- Using secure connections (HTTPS) to transmit data
- Verifying Turnstile tokens on the server before signup
- Using server-side controls and a secure service role key for database inserts
- Storing only necessary security log data
- Applying rate limits to reduce abuse
Third parties we use
We share limited personal data with the following third-party service providers, solely to operate the site:
- Supabase — stores user accounts, emails, authentication data, and puzzle progress records
- Cloudflare Turnstile — used for bot verification and anti-abuse checks
- Brevo — stores the email addresses of users who opt in to our mailing list, and sends mailing list communications on our behalf
- Upstash (Redis) — briefly stores rate-limit counters (IP address and email address) to prevent spam and abuse of forms on the site
- Vercel Analytics — collects anonymized usage analytics, and only runs if you accept analytics cookies via our cookie consent banner
We do not sell your personal data.
Data retention
We retain data only as long as necessary for account operation, security monitoring, abuse investigation, and legal or compliance requirements. Signup and login logs may be retained longer for fraud prevention and security auditing.
Your rights
Depending on your jurisdiction, you may have the right to access the data we hold about you, including signup and login records such as IP address and associated signup attempt metadata. You may also correct inaccurate personal data, request deletion of your account and associated data, and withdraw consent for processing where applicable.
To exercise these rights, contact us through the support channels listed on the site.
Cookies and tracking
We may use cookies and similar technologies for session management, authentication, security checks, and bot verification with Turnstile.
Mailing list consent
If you complete Puzzle 3 and opt in through your account settings, we may use your email address to send optional announcements, updates, and offers.
You may unsubscribe at any time using the link in our emails or by updating your mailing preferences in your account settings.
Changes to this policy
We may update this policy from time to time. The latest version will be published on our site.
Contact
If you have privacy questions or requests, please contact us through the support channels provided on the website.