Last updated: 2026-10-30

Privacy Policy

This Privacy Policy describes how Helsh-js BV ("I", "me", "my") collects, uses, and protects your personal data when you visit helsh-js.com or engage me for services.

1. Who I am

Helsh-js BV is a one-person software studio based in Belgium. I am the data controller for any personal data collected through this website. For inquiries, contact info@helsh-js.com.

2. What data I collect

• Contact form submissions. If you submit the contact form, I receive your name, email address, the project type and description you provide, and the time of submission.
• Email correspondence. If you email me directly I will retain that thread for as long as is necessary to respond and continue any resulting engagement.
• Server logs. The infrastructure provider (Cloudflare) automatically receives standard request metadata including IP address, user agent, and request paths. This is used solely for security, abuse prevention, and operational diagnostics.
• Spam protection. The contact form, on the contact page and at the bottom of the homepage, loads Cloudflare Turnstile, which checks that the form is being sent by a person and not a bot. To do that it processes your IP address and technical information about your browser. I use the result only to decide whether to accept the submission.

I do not use analytics services, advertising trackers, or cross-site cookies. The only third-party script on this site is Cloudflare Turnstile on the contact form. Fonts load from Bunny Fonts, a privacy-friendly font service based in the EU, which receives your IP address when your browser requests them.

3. Why I process it

• To respond to inquiries and provide the services you have requested (Article 6(1)(b) GDPR, performance of a contract or pre-contractual steps).
• To comply with my legal obligations (Article 6(1)(c) GDPR), including accounting and tax records.
• To pursue my legitimate interest in operating the website securely and preventing abuse (Article 6(1)(f) GDPR).

4. Where it goes

Contact form submissions are forwarded to a private Discord channel that only I can read. Discord, Inc. acts as my data processor for the transmission and storage of those messages. Discord's privacy practices are described in their own policy.

Website hosting and the Turnstile spam check are provided by Cloudflare. Cloudflare may process data in jurisdictions outside the European Economic Area; transfers are covered by Standard Contractual Clauses where applicable.

5. How long I keep it

• Contact form submissions: retained for up to 24 months unless an engagement results, in which case retention follows the engagement record.
• Engagement records (invoices, contracts, correspondence): retained for 7 years as required under Belgian commercial and tax law.
• Server logs: retained per Cloudflare's standard retention windows.

6. Your rights

Under GDPR you have the right to access, rectify, port, or erase your personal data, and to object to or restrict its processing. To exercise any of these rights, email info@helsh-js.com. You also have the right to lodge a complaint with the Belgian Data Protection Authority (gegevensbeschermingsautoriteit.be).

7. Cookies

Apart from Cloudflare Turnstile on the contact form, this site uses one (1) cookie-like mechanism: a localStorage entry called hjs-geocities that remembers whether you turned on the retro easter egg. It is set only when you turn it on and is never transmitted to my servers.

8. Changes to this policy

I may update this policy from time to time. Material changes will be marked with a new "Last updated" date at the top.