Privacy & comments

Last updated: October 20, 2026. For privacy questions, account help or deletion requests, contact the helko operator at [email protected].

Your account

We collect your email address and display name to create and manage your account. After email verification, we store a password hash, verification status, account creation date and privacy consent date. We use this information for login, account security and password recovery. We retain verified account data until you request account deletion. You can decline this collection by browsing without creating an account.

Unverified signup records are removed after seven days without a verification email request. Verification links expire after 24 hours; password reset links expire after 15 minutes. Links work once and are stored as hashes. Expired link records are cleaned up daily.

Account emails

Resend processes your email address and the verification or reset message to deliver account emails. It is an external email provider; delivery may involve processing outside your country. Our sending domain is configured in Resend’s Tokyo region. This account flow does not subscribe you to marketing emails. Replies and account requests should go to [email protected].

Your choices

To request access, correction or deletion of account information or a comment, email the operator. We may ask you to verify control of your account before acting on a request. Account deletion is handled by the operator; there is no automatic deletion button at this time.

Comments

You can comment without an account. We store the name and text you submit; leave the name blank to appear as Anonymous. Approved comments are public and remain available until removed by an editor or following a deletion request. Do not include passwords, contact details or private information.

Comments are reviewed before publication. Spam, abusive content and personal information may be hidden. Editors can close comments on a story.

Cookies & security

Essential session cookies support login, form protection and counting a story once per session. View counts are approximate and are not unique visitor counts. The service processes IP addresses to limit repeated login, email and comment requests. The application keeps request-limit counters in memory for up to ten minutes. Infrastructure logs and security records may also contain IP addresses.

Cloudflare handles website traffic and connection security. The current application does not load third-party analytics or advertising scripts. If this changes, we will update this notice.