Log In

Privacy Information

Last updated October 20, 2026

This page explains what Syntra stores about you, why, and how to delete it. In short: we keep what's needed to run your account, and we do not log IP addresses.

IP addresses

We do not log or store your IP address, hashed or otherwise. It is not written to any of our logs or our database, and it is never linked to your account.

To stop spam and abuse, a few actions (logging in, signing up, starting Discord verification, posting on the forums, uploading, and account deletion requests) are rate limited. For these, a one-way hash of your IP is used as a temporary counter that is kept only in memory and expires on its own, after at most 10 minutes for most actions and one day for account deletion attempts. It is never saved or tied to you. Failed logins are also counted per username (not per IP) for 15 minutes, so an account can't be brute forced.

When you join a game, a one-way hash of your IP is placed inside the join ticket sent to your browser, so the game can check that the ticket is being used by the device that requested it. This ticket is not stored on our servers.

If you only visit the website

Nothing about you is stored. Your browser sends us standard information with each request (such as your user agent) so the page can load, but we don't record it.

When you sign up

  • Your username and password. Your password is stored as an Argon2 hash, never in plain text.
  • The Discord account you verify with: its Discord user ID and display name. We only request Discord's identify permission, which does not include your email address. We use it to make sure each account belongs to a real person and to let you reset your password.
  • Your account creation date and the things made for you at sign-up, such as your avatar, its thumbnail and your starter place.

When you use your account

  • Anything you enter on the site is saved, such as your description, status updates, forum posts, messages, groups and trades. Every status update is kept, while only your latest description is kept.
  • Your outfits, your current avatar and its thumbnail, and items you own.
  • Anything you upload, such as images, models or places. Uploads may be removed if they break the terms of service.
  • When you were last online, which is updated while you use the site logged in.
  • If you turn on 2-step verification: the secret key shared with your authenticator app, and one-way hashes of your recovery codes. Turning it off deletes both.

Cookies

We only use cookies the site needs to work: one that keeps you logged in, one that protects forms from cross-site request forgery, and short-lived ones used during Discord verification and the 2-step verification part of logging in (deleted once you finish, or after at most 30 minutes). We don't use advertising or tracking cookies.

Deleting your data

You can request an account deletion here. You must be offline for one week before your account can be deleted. Your online time updates every time you visit while logged in, so log out first and set a reminder to come back in a week. Deleting your account removes all of your information, except content you uploaded to the site (such as images).

Other services

Syntra uses the following services, which have their own privacy policies. Like any website you visit, they can see your IP address when your browser connects to them: