Privacy Policy

Who we are

Helm ("Helm", "we", "us") is a control room for streamers that connects to Twitch and Kick, and is the data controller responsible for your personal data. For any privacy question or to exercise your rights, contact [email protected].

Data we collect

Helm only collects what it needs to run the features you use:

• Account & identity — your platform (Twitch/Kick) username, display name, avatar, platform user IDs, and email address where a platform provides one.
• Platform connections — OAuth access and refresh tokens for the accounts you link, so Helm can read events and act in chat on your behalf.
• Channel & activity data — channels you own, channel-points and loyalty balances and their transaction history, and a log of stream events (subscriptions, follows, cheers, raids) for your channels.
• Configuration & content — settings, triggers, overlays, saved widgets, and media files (images, sounds, video) you upload.
• Team & billing — delegations you grant to or receive from moderators, and your subscription plan and status.
• Technical — a session identifier (see Cookies below), and standard request metadata such as your IP address and browser, processed transiently to serve and secure the app.

Why we use it & our legal basis

• To provide the service you signed up for — running chat, points, overlays and automations. Legal basis: performance of a contract.
• To keep Helm secure and working — authentication, abuse prevention, debugging. Legal basis: legitimate interests.
• Optional analytics, if introduced in the future. Legal basis: consent, which you give or withhold in the cookie banner.

Viewers of connected channels

Helm also processes a small amount of personal data about people who take part in a channel connected to Helm but have not signed up for Helm themselves. For this data Helm acts as an independent controller — it decides how the data is used, rather than acting on any individual streamer's instructions.

This data covers:

• a viewer's platform username and display name, and the channel-points and loyalty balance Helm awards them;
• a record of stream events they take part in — follows, subscriptions, cheers, raids and the like.

It is received from the connected platform's public chat and event feeds, not from the viewer directly. We process it on the basis of legitimate interests — providing the chat, loyalty and statistics features a streamer has chosen to run — and not for advertising or cross-channel profiling.

Viewers have the same rights set out below. As they have no Helm account to sign in to, they can exercise those rights by emailing [email protected]. A channel's streamer, and Helm, can also delete this data.

Cookies

Helm keeps its use of cookies to a minimum.

session_id Essential

Set when you sign in, this cookie keeps you authenticated as you move between pages. Helm cannot work without it, so — under the GDPR and the ePrivacy Directive — it is exempt from consent. It is HttpOnly, scoped to this site, and cleared when you sign out.

helm_consent Preference

Records the choice you make in the cookie banner so we do not ask again. It stores nothing but that choice, and lasts about 180 days.

Analytics Optional

Helm currently sets no analytics, advertising, or cross-site tracking cookies. Should that ever change, such cookies will only be set after you choose Accept in the banner — choosing Reject opts you out.

Who we share it with

Helm does not sell your personal data. We share it only with the service providers ("sub-processors") needed to operate, and only as far as needed:

• Hetzner — Helm runs on a virtual server provided by Hetzner Online GmbH, located in the European Union; the application and its database are stored there.
• Twitch and Kick — we exchange data with their APIs to power the integration you connect. Receiving a connected channel's chat may rely on that platform's own real-time infrastructure.
• Payment processor — a payment provider will handle subscription billing once paid plans are live; this policy will name it before any paid plan launches.

We may also disclose data where required by law. Helm and its database are hosted within the European Union, and your personal data is not transferred outside the EU/EEA — except, once billing is live, by the payment processor.

How long we keep it

We keep your personal data for as long as your account is active. When you delete your account, the account and the data associated with it are removed (see Your rights below). We may retain limited records for longer where the law requires it.

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you, and receive a portable copy;
• have inaccurate data corrected;
• have your data erased ("right to be forgotten");
• restrict or object to certain processing;
• withdraw consent at any time, where processing relies on consent;
• lodge a complaint with your local data protection authority.

You can act on the first three yourself: the Account page has a Data & privacy section to export your personal data or permanently delete your account. The export covers your account and activity data; for a copy of stored configuration such as overlays and triggers, or for any other request, email [email protected] and we will respond within one month.

Children

Helm is not directed at children. You must meet the minimum age required by Twitch and Kick to use their services, and to use Helm.

Changes to this policy

We may update this policy as Helm evolves. The "last updated" date above always reflects the current version; material changes will be communicated in the app.