IH

Iron Helix

← Back to the hub

Privacy Policy

Last updated: October 1, 2026

This policy covers the Iron Helix hub — the launcher page you're on right now. Each tool or application on this network either provides its own dedicated privacy policy or is explicitly covered under the relevant sections of this document (including our Apps Made for Children provisions).

The short version

There's no account, no sign-up, and no server-side profile. The hub is free for everyone, has no ads, no analytics, and no AI features (apps contain no AI features and send nothing to AI services). Every tool is an installable web app (PWA). The hub remembers which tools you've pinned and recently launched by storing a small amount of data in your browser's local storage, on your device. We never see it. Clearing your browser data, or uninstalling the PWA, erases it.

What the hub stores

  • A list of the tool IDs you've pinned.
  • A short list of the tools you've recently launched.
  • Cached application pages stored on your device so the installed app works offline.

All are kept only on your device. Nothing is sent to us, and there's no account for this data to be tied to.

Hosting & infrastructure

The hub is hosted on Cloudflare Pages. Like most web hosts, Cloudflare's network processes standard connection metadata (such as IP address, request timing, and user-agent) to serve pages and guard against abuse. We don't control that logging directly — see Cloudflare's own privacy policy for details on how they handle it.

Admin area security logs

The hub has a private operator-only admin area. To protect it, the server records the IP address of requests to the admin login and admin actions: failed-login counts are kept for about 24 hours to enforce a lockout, and a log of admin actions (what changed, which tool, when, and the IP) is kept for up to 90 days. This applies to the operator's own access, not to ordinary visitors browsing the hub.

Supporting the project (Ko-fi)

The hub links to Ko-fi (ko-fi.com). If you follow that link, Ko-fi's own privacy policy and terms apply; the hub doesn't receive your payment details or personal information from Ko-fi. Support is optional.

The tools you launch (spokes)

Each tool is a separate app on its own subdomain with its own privacy, terms and disclaimer pages linked from its footer. The hub doesn't see what you do in a tool. Tools may call third-party services (for example weather providers) and those calls come directly from your browser to that service, so that service can see your IP address and whatever the tool sends it; the tool's own privacy page lists them.

Tools that make third-party requests:

  • AeroWeather (aeroweather.ironhelix.io): sends the location you search for or choose to share to public weather, geocoding and radar services. See its privacy page.
This list is updated when a tool starts sending data to third parties.

Children's privacy

The hub isn't directed at children, and we don't knowingly collect personal information from anyone.

Apps Made for Children (Spooky Find)

Spooky Find is designed for children and families. In compliance with children's online privacy standards (including COPPA and GDPR-K):

  • No Personal Data Collected: We do not request, collect, store, or transmit any personal information, names, email addresses, device identifiers, or biometric data from children.
  • No Accounts, Ads, or Analytics: The application contains no user accounts, third-party advertisements, tracking beacons, analytics scripts, or social chat features.
  • Local Browser Storage Only: Game progress, unlocked discoveries, and settings are stored strictly on the local device via localStorage. This data never leaves the player's browser unless manually exported by the user.
  • Protected External Links: All outbound links (including developer links and optional support/donation links) are isolated behind a grown-up math verification gate to prevent accidental navigation by children.
  • Host Logs: When loading the static web files, the web hosting server automatically receives standard technical request data (IP address, user-agent) necessary to transmit web pages. These logs are maintained solely for security and operations and are not merged with user profiles.
  • Contact: Parents or guardians with questions regarding privacy can contact us at: support@ironhelix.io.

Your choices

You can clear your pinned/recent tools at any time by clearing this site's data in your browser settings. Because there's no account, there's nothing further for us to delete on our end. The operator can delete admin log entries on request via the contact email.

Changes to this policy

We may update this policy as the hub changes. The "Last updated" date above will reflect the latest revision.

Contact

Questions about this policy: ironhelix7@gmail.com.