Privacy

Minhelm (“we”, “us”) is the website builder at minhelm.com. Published sites live on *.minhelm.app. We are not a dropshipping or ads company. This notice describes what we actually collect today. It is not legal advice.

Who we are

Service: Minhelm, minhelm.com. Contact: hello@minhelm.com. We have not listed a company number or street address here because we will not invent one. If that changes, this page will be updated.

What we collect

Only what we need to run the product:

• Account: email and a hashed password. We do not store your password in plain text. To confirm signup and each sign-in we email a short one-time code. The code is stored hashed and expires in 10 minutes.
• Session: an HttpOnly cookie (mh_session) so you stay signed in, and a short-lived mh_verify cookie while you enter an email code.
• Sites: the prompt you type, the site name you choose, the generated HTML, the site slug, and when it was created or updated.
• Usage: a record that a build happened, whether AI was used, timestamps, and credits charged from that model call. Credits come from model usage (minimum 1 per AI run). Every account uses the Free monthly allowance. Clover is a preview model. Billing is not live.
• Security: IP address for short-lived rate limits (sign-in, signup, generate). We do not use this for advertising.

We do not collect payment cards or browsing profiles. We do not run ads or analytics pixels.

Why

To create your account, keep you signed in, generate and host your site, prevent abuse, and (when you ask) delete a site. Legal bases under GDPR, if it applies to you: contract (providing the service) and legitimate interests (security and rate limits).

Who we share with

• Cloudflare: DNS and reverse proxy in front of our origin (TLS to visitors).
• Our Contabo server: runs the Minhelm app, account database (SQLite), and published site files.
• Resend: if a mail key is set on the server, we send confirmation codes to your email. That key never goes to the browser.
• OpenModels: if an API key is configured on the server, your prompt is sent there to generate HTML. That key never goes to the browser. If there is no key, the page is built from your words on our server only. We may switch the provider later (same OpenAI-compatible chat API) without sending the key to your browser.
• Google Fonts: the builder loads Inter, Space Grotesk, and related fonts from Google. Google may see your IP address for that request.

We do not sell your data. We do not use third-party ad networks.

Example images

Photos on the marketing site are illustrative mockups. They are not photos of Minhelm customers, and we do not claim they are original photographs of real businesses we built for. Review any images you publish on your own site for copyright.

Cookies and similar

See the Cookies page. The sign-in cookie is essential. Browser localStorage may remember sidebar collapse, a dismissed promo, and that you closed the cookie notice. That is not advertising tracking.

Retention and your rights

Account and site data stay until you delete a site or ask us to remove the account. You can delete individual sites from Your sites. Email hello@minhelm.com to request a copy of your data or deletion of your account. If you are in the EEA or UK you may also have rights to access, correct, restrict, object, and complain to a supervisory authority.

Local laws

Privacy and consumer rules differ by country. This page describes what Minhelm does today. It is not legal advice, and we have not invented a company registration, VAT number, or DPO. If your country requires extra notices, email us and we will update this page when we can meet them honestly.

Children

Minhelm is not directed at children under 16. Do not create an account for someone younger than that.

Changes

We will update this page when the product’s data practices change (for example when checkout exists).