Helmur Tactile Lab

Privacy policy

Last updated October 8, 2026

Helmur Tactile Lab (lab.helmur.com) is run by Helmur ("we", "us"). This policy explains what we collect when you use the site, why, and what you can do about it. We keep it short because we collect very little.

What we collect

If you only browse, we don't ask for anything. We don't use analytics, advertising or tracking tools.

If you sign in with Google, Google shares these details with us, and we store them:

• Your name and email address
• Your Google account ID (a number that identifies your account)
• A link to your Google profile picture
• When you signed up, when you last signed in, and whether your access has been approved, and by whom

We ask Google only for the basic openid, email and profile permissions. We never see your Google password, and we can't read your email, contacts, files or anything else in your Google account.

Course progress (which tasks you've ticked off) is saved in your own browser. It is not sent to us.

Anything you choose to send us, such as a review submission you paste into the course Slack channel, is handled by the tool you send it through.

How we use it

• To recognise you when you sign in
• To decide who can open course modules. Access is approved by hand.
• To contact you about the course you signed up for

We don't sell your information, use it for advertising, or share it with anyone except the service providers listed below, who help us run the site.

Google user data

Our use of information received from Google follows the Google API Services User Data Policy, including its Limited Use requirements. We use Google sign-in data only to identify you and manage your access to the course. We do not transfer it to others except as needed to run the site, use it for advertising, or use it to train AI models.

Cookies

We set two cookies, both needed for sign-in:

• lab_session keeps you signed in for up to 30 days.
• lab_oauth protects the sign-in process and lasts 10 minutes.

We don't use advertising or analytics cookies.

Service providers

• Railway hosts the site and stores the sign-in details above.
• Google provides sign-in, and serves the Inter and Source Serif fonts.
• Fontshare (Indian Type Foundry) serves the Cabinet Grotesk font.

When your browser loads fonts, the font provider receives your IP address, as with any website that uses web fonts.

How long we keep it

We keep your sign-in details while you have an account. Ask us to delete them and we will, usually within 30 days. To remove the course progress saved in your browser, clear this site's data in your browser settings.

Your choices

You can ask to see, correct or delete the information we hold about you by emailing prashant@helmur.com. You can also remove the site's access at any time from your Google account, under Third-party connections.

Children

The course is for adults. We don't knowingly collect information from anyone under 16.

Changes

If we change this policy, we'll update the date at the top. If a change affects how we use information we already hold, we'll tell signed-up learners by email first.

Contact

Questions about privacy: prashant@helmur.com.