Privacy Policy

Syntax operates syntax.win and is responsible for the personal data described here. This policy explains what Syntax collects when you use our website, dashboard, loader and software (the "Services"), why, who it is shared with, and how long it is kept. It applies alongside our Terms of Service. We collect what we need to sell, deliver and protect licenses, and no more.

Your account

• Username, email address, and your password (stored only as a one-way hash)
• Role, account settings, and whether two-factor authentication is on
• If you link Discord: your Discord account ID, username and avatar

Sign-in and security

• Your last 50 sign-ins: time, IP address, the country it resolves to, and your browser's user agent; and the IP you registered from
• One-time sign-in and verification codes, stored hashed and only until they expire or are used
• An automated bot check on sign-in and registration, to stop automated abuse

Purchases

• What you bought, the price, any coupon or sale, the date, the payment method and its status, and the license keys issued
• For card and Apple Pay payments: the card brand, its last four digits and a receipt link, from our payment processor. We never receive or store your full card number
• For guest checkout: the email address the key is sent to, and whether that email was delivered
• For cryptocurrency payments: the payment details our checkout records

The loader and your licenses

• A hardware identifier (HWID) derived from your machine, which locks a license to it. It is an identifier, not a copy of your hardware configuration
• The IP address and country the loader connects from, the loader version, and active sessions
• Integrity and tamper reports the loader sends when it detects debugging, tampering or a similar problem, including HWID, IP, country and version, and what was detected
• Diagnostic logs the loader sends to help us fix problems

Community and reviews

• Shoutbox messages and reactions
• Direct messages you send and receive on the dashboard
• Reviews you write, and any staff reply
• Moderation records: warnings and mutes

Resellers

• Coin balance and every change to it, and the keys generated with it

Support and administration

• What you tell us in tickets and emails
• A log of staff actions on accounts and licenses, recording which staff member acted and from where

• Your legal name, address, date of birth or government ID
• Your full card number or crypto wallet keys
• Your game accounts, game data, screenshots or anything outside what the loader needs to run
• Advertising or cross-site tracking data — we run no ad trackers and never sell personal data

• To create and secure your account, and send sign-in codes and security notices
• To take payment, deliver keys, and show your orders and subscriptions
• To lock licenses to one machine and detect sharing, tampering and fraud
• To enforce our Terms, including bans and the HWID blacklist
• To run the shoutbox, direct messages and reviews
• If you link Discord: to add you to our server when you ask us to, and keep your subscriber role in step with your subscription
• To answer support requests and keep the Services working and secure
• To send you emails about your orders and account. We do not send marketing email

We do not sell personal data. We share it only with the service providers that run Syntax for us, each of which gets only what its job needs and processes it on our behalf:

• Hosting and storage providers — run the website, and store our database, and provide privacy-friendly page analytics
• Payment processors — handle card and Apple Pay payments
• An email delivery provider — sends email such as keys and sign-in codes
• A bot-protection provider — checks sign-ins and registrations for automated abuse
• Discord — if you link your account, to manage your server membership and subscriber role
• A messaging service our staff use — for internal alerts about orders and loader reports

Cryptocurrency payments are recorded on their public blockchain, which is outside our control. We may also disclose information when the law requires it, or to protect our rights, our customers or the Services — for example, in response to fraud.

• Session cookie — keeps you signed in. Essential.
• Discord connection cookie — a short-lived cookie that secures linking your Discord account.
• Guest order cookie — lets a guest buyer reopen their order page from the same browser.
• Bot protection — our bot-protection provider may set its own cookies on the sign-in and registration pages to tell people from bots.
• Local storage — remembers small preferences, such as a dismissed announcement.

Our page analytics do not use cookies. We use no advertising or tracking cookies.

• Shoutbox messages: deleted automatically 24 hours after they are posted
• Loader sessions: deleted when they expire
• Sign-in history: your most recent 50 sign-ins; older ones are discarded
• Rate-limit and abuse records: up to 24 hours
• Account data and direct messages: while your account exists
• Reviews: until you delete them or your account is deleted
• Orders and payment records: kept after an account is closed, for accounting, fraud prevention and payment disputes
• HWIDs, bans and integrity reports: kept as long as needed to enforce our Terms, including the HWID blacklist

You can:

• See and correct your account details and email address in Settings
• Unlink Discord in Settings at any time
• Edit or delete your reviews, and edit your own shoutbox messages
• Ask for a copy of your data, or ask us to delete your account, by emailing privacy@syntax.win

When we delete an account, we may keep what we are required or entitled to keep: order and payment records, and the bans and HWID records needed to stop a banned user returning. Depending on where you live, you may have further rights — such as to object to or restrict processing — and the right to complain to your data protection authority.

All traffic is encrypted over HTTPS. Passwords and one-time codes are stored only as hashes, license keys are masked on screen until you reveal them, and two-factor sign-in is available to every account. No system is perfectly secure, but we work to protect your data and will tell you if a breach affects it.

The Services are for adults aged 18 and over. We do not knowingly collect data from anyone younger; if we learn we have, we will delete the account.

Our servers and database are in the United States, and our service providers may process data in other countries. Wherever it is processed, we protect it as this policy describes.

We will update this policy when what we collect or how we use it changes. The date at the top shows the latest version, and significant changes are announced on our Discord.

For privacy questions, or to request a copy or deletion of your data, email privacy@syntax.win or open a ticket on Discord.