Syden privacy policy

Last updated November 9, 2026

This is a translation of the original in Portuguese. Syden is run from Brazil, and if the two ever differ, the Portuguese version is the one that applies.

Syden is a free voice, video and chat app. Anyone can create an account by confirming an email address. Joining a community, on the other hand, still takes an invite from someone who is already in it. It is a personal, non-profit project run by Sydenstricker. There are no ads and we don't sell your data — not to advertisers, not to anyone. We use a single measurement tool, and it is described under Site measurement, with what it does and what it doesn't.

What we store

Account: your username, your display name (if you choose one) and your password. The password is never stored as text: we only keep a scrambled version (a hash) that doesn't allow anyone to work it out.
Email: anyone creating an account now has to give an address and confirm it before signing in. It is used to give your account back if you forget your password, and to warn you if something serious happens to Syden. Anyone who already had an account before September 27, 2026 was not required to do anything: on those accounts the email remains optional. You can change or remove the address whenever you like, under Settings → My account — if you remove it, a forgotten password can no longer be recovered.
Messages: the text of the messages you send, in which channel, and when.
Images and sounds you upload: avatar (and your 5 previous avatars, so you can go back to one of them; only you see them, and you can remove them from the history), emojis, stickers (the ones you make and the ones you save) and soundboard sounds.
Badges: which ones you received, when and why, and which ones you chose to show on your profile.
Call usage: when you join and leave voice rooms and when you share your screen, for the "Server usage" panel, which only administrators see.
Date of birth: asked of everyone, because of ECA Digital (see Age). It is used only to know the age range (under 13, 13 to 15, 16 and 17, adult), and for nothing else — not for ads, which Syden doesn't have, nor for behavioral profiling. Nobody sees it: not other people, nor the guardian of a minor, who sees only the range.
If you are under 18: your account's protection rules (private chat, screen, camera and streams only with friends, and the time limit, if any), the link to your guardian, and the daily usage time, counted in minutes while Syden is open. For adults, usage time is not measured.
Reports: if someone reports a message of yours, we keep a copy of what was reported, the written reason, the name of the person who reported it and yours. The copy exists because the message may be deleted before anyone reviews the report. A report of a screen share also keeps the image of that moment, taken from the screen of whoever reported it — Syden doesn't record streams; that image is the only evidence, and only the Syden team opens it.
Bans and suspensions: if your account is banned or suspended, we keep the reason, when, and the appeal you write.
Moderation log: when someone deletes another person's message, removes a member, deletes an account or grants the administrator role, we record who did it, what they did and when. This is what makes it possible to answer a complaint later — and that is why it keeps the name, not just the account number.
Inside each community: the custom roles you were given; level points, if the community turned levels on (counted from messages and time in calls); the warnings and timeouts you received, with the reason, who applied them and when; the reminders you asked Syden for; and the giveaways you won (taking part is just the 🎉 reaction, which is already part of the message).
Birthday, if you provide it: only the day and month, never the year. It lets communities that announce birthdays congratulate you on the day. It is optional and can be removed under Settings → My account.
Languages, if you provide them: the ones you speak and the ones you are learning. They show on your profile card, so people who speak a language can find people learning it. It is optional and can be changed under Settings → My account.
Karaoke: each time you put on a song to sing with the group in the room, we store the song, the community and the date. That is what makes the community's karaoke ranking, which its members can see.
Bunny race: your best time on each track, the time of each lap, the date and the path your kart took in that race (the "ghost"). Only you and your accepted friends see it, to race against it. A slower race is not stored. And the trophies: when you finish on the podium of one of the voice-room mini-games, with the group (the race and the cups, the Bunny Party, the mini golf, the board game, the blocks, the jump and the brawl), we store the position, the track, the time, the points, the date and who you raced against (only the account; the name is read when it is shown). You see them in your room, and the ones you feature are also shown to whoever can visit your room (see below), with who it was against. Someone who deletes their account no longer appears in other people's trophies. The cups the group completes count in the community achievements, without saying who raced.
Your room: how you arranged it (the furniture, the window, the colors, the pet and the name you gave it), who can visit it (everyone, your friends or only people you invite, as you choose in Settings → My account), who you invited, and what you featured on the trophy shelf. Whoever can visit sees the arrangement and the featured items, including any group achievements you feature, with the community's name. Before 18, the room doesn't open to everyone.
Bunny jump: your best time on each level, the date and the path your bunny took (the "ghost"). As in the race, only you and your accepted friends see it, and a slower time is not stored. Podium trophies from the voice room are stored the same way as the race's.
Jet Bunnies, Burrow Regatta and Barn Tower: as in the race, your best time on each track or tower, the time of each lap, the date and the path your ship, boat or bunny took (the "ghost"). Only you and your accepted friends see it, and a slower time is not stored.
Burrow Toy Cars: your best time in the race against the clock, the time of each lap, the date and the throttle you used at each moment (the "ghost": with it, the car replays your race). Only you and your accepted friends see it, and a slower time is not stored. Podium trophies from the voice room are stored the same way as the race's.
Burrow Obstacle Course: your best time on each course, how many times you fell on it, the date and the controls you used at each moment (the "ghost": with them, the bunny replays your run). Only you and your accepted friends see it, and a slower time is not stored. Podium trophies from the voice room are stored the same way as the race's.
Garden Pest Hunt, Burrow Squadron, Burrow Traffic and Bunny session: your highest Solo score, with the date (in Bunny session, a session with your group in the room also counts). Only you see it.
Burrow Bridge: for each stage, the lowest cost of a bridge of yours that got the traffic across in Solo, with the date. Only you see it.
Community achievements: what the group achieved together (hours in calls, games, songs sung and others) and when. For this we also store the time you shared your screen with two or more people watching, per day, and call sessions now note which voice room they were in. The other counts use what is already on this list.
Technical logs: the server records the IP address, date and the address requested for each request. They are used to fix problems, are limited to a few megabytes, and the oldest are deleted automatically.

What we don't store

Voice, video and shared screens are not recorded. They pass through the server in real time only to reach the other people in the room.
We don't collect location, contacts or phone numbers.

Site measurement

The syden.chat address uses Cloudflare Web Analytics, which counts how many visits the page gets and how long it takes to load. It is the project's only measurement tool, and it is here for a practical reason: without measuring, a screen that takes too long to open is not a problem someone fixes — it is a problem nobody finds out about.

It is worth saying what it does not do, because the word "analytics" usually means something worse:

It uses no cookies and stores nothing in your browser: no identifier, no local storage.
It doesn't recognize you from one visit to the next, and has no way of following you outside Syden.
It doesn't read what comes after the "?" in the address. A link with an invite code is not sent.
It doesn't fingerprint your device — the technique of identifying someone by the characteristics of their browser.

What it records is the page opened, the load time, the type of browser and the country. This applies to everything served at syden.chat, including the app itself. Voice and video calls don't go through it.

Your preferences, and where each one lives

The app stores a login token on your computer, valid for 30 days. Signing out deletes the token. Changing your password, or using Sign out of the other devices, immediately invalidates the tokens stored on other computers and phones.

Your preferences are split in two, and the rule is: what is yours goes with you; what belongs to the device stays on the device.

Stay only on this computer: which microphone, speaker and camera you chose. The names of those devices don't exist on another machine, so taking them along would only cause confusion.
Go up to the server, so you don't lose everything when you switch browsers or go from the site to the app: theme, language, each person's volume, notification sounds, visual effects, stream quality, the bunny you chose, the call ringtone you pick for each person and the groups you put them in (like “CS” or “College”) — and the notes you write about other people. Ringtones and groups are also yours only: nobody else sees them, not even the people in them.

About the notes, it is worth being direct, because they used to never leave your computer: they are now stored on the server, along with your other preferences. The change has two reasons — you no longer lose them when you switch browsers, and they can be consulted when a report is investigated. They are still yours: nobody else sees them in the app, not even the person you wrote about. When you delete your account, they are deleted with it.

Who sees your data

Server members: see your name, avatar, badges, messages, whether you are online and which voice room you are in.
Your community's administrator can delete messages, remove members and read the reports made there.
Community members see its achievements and, in some of them, the good examples: the names of up to three people who contributed the most in the last 30 days (who was in calls with the group, streamed to it, played, sang or welcomed newcomers), with no ranking and no numbers.
The guardian of someone under 18 (only if the accounts are linked) sees the age range, the daily usage time, the account's rules and the names of the adults the teenager is friends with or chats with privately. They don't see the messages, nor the date of birth.
Whoever maintains Syden sees only the count for each community: name, how many members, how many messages there were in a period, how many people wrote and when the last one was. It is used to know where Syden is growing and to notice a space being used for something it shouldn't be. The content of conversations doesn't appear in that panel and is not read. Whoever maintains the server technically has access to the whole database — as with any service — and only uses it when there is a report to investigate or a court order.
Infrastructure providers: the server is at Hetzner Online GmbH, in Germany (European Union). The site is published through GitHub Pages, which may log visits according to GitHub's policy. Confirmation and password-recovery emails are sent through Resend, from the São Paulo region — only your address and the text of the message pass through it. The server's address uses the DuckDNS service only for name resolution on the internet.
Cloudflare: the pages of syden.chat pass through it before reaching you. It delivers the site, protects sign-up against bots (Turnstile) and performs the measurement described above. Because it sits on that path, it sees the IP address and the page requested on each visit — this is true even with measurement turned off, and it is the price of having the site protected by it. Voice and video calls don't go through Cloudflare.
GIPHY — only when there is a GIF in the conversation. The GIF picker searches GIPHY's library, and the images are loaded from their servers: Syden keeps no copy. This means that when you open a conversation that has a GIF, your browser makes a request to GIPHY, and GIPHY sees your IP address and the address of the image — as happens with any image hosted somewhere else.

What you type in the GIF search goes to them, because that is the search; it goes through our server, without your name or your account attached. None of this happens if you don't open the picker and there is no GIF in the conversation.
Google Fonts — only if Syden is in a language with a different script. Anyone using Syden in Arabic, Hebrew, Hindi, Bengali, Tamil, Telugu, Thai, Burmese, Amharic, Chinese, Japanese, Korean or another script that is not Latin, Cyrillic or Greek needs a font that draws those letters, and it is downloaded from Google Fonts. At that moment Google sees your IP address and the name of the font requested — nothing from your account or your conversations. In Portuguese, English, Spanish, Russian, Greek and the other languages of those three scripts, Syden uses the letters already on your device and doesn't talk to Google.

The fonts a community chooses for its name, and the font of your name on your profile, are stored in Syden itself and don't come from outside.
Partner games — only when you open one. A few games from other websites, with no ads, run inside Syden, in the Mini-games list. Today there is one: Termo (term.ooo). It only loads after you click it, and only for you. From then on it is their website running inside the Syden window: it sees your IP address and uses Google Analytics to count visits, under its own policy. Syden sends it nothing from your account or your conversations, nor where you came from. If you prefer, the same game can be opened outside, in your browser.
Project Arachnid (Canada) — every image you upload. Before an image is stored — avatar, community image, emoji, sticker, message attachment or the image of a screen-share report — it is checked against a database of known child sexual abuse material, maintained by the Canadian Centre for Child Protection. The image is sent to them for that check, and that is why this must be said plainly instead of being hidden in a technical line.

Each image is checked only once. The result is stored by the file's code, so uploading the same photo again doesn't send it again. Audio, video and documents don't go there — the database is of images. And the content of your text conversations is never sent to anyone.

This exists because a server that hosts people's images must block that material, and because Brazilian law (ECA Digital) and German law — where the server is — require removal and reporting to the authorities. When an image is rejected, a record of what happened is kept; the image is never stored.
Google, Discord, GitHub or Steam — only if you choose to sign in with them. At that moment the provider learns that you signed in to Syden, and Syden receives from it your name, your photo and your email when there is one (Steam doesn't provide email). We ask for nothing beyond that: we don't read your messages, we don't see your contacts and we don't post anything on your behalf. Unlinking it under Settings → My account → Sign in with ends the matter.

We don't share your data with anyone else, except when required by law.

For how long

For as long as your account exists. When you delete your account, we immediately delete your messages, your avatar, your email, your badges and your usage history — with a 90-day exception, explained right below. Server backups may keep this data for up to 7 days before being replaced. Channels, emojis and sounds you created remain available to the group, without your name. The time you spent in calls and the times you sang karaoke stay added to each community's total, only as a number: no dates and nothing linking it to you. The achievements the group reached remain the group's, without your name.

Two exceptions, to be clear: the moderation log and reports remain stored, with the name written, even after the account is deleted. Without this there would be no way to answer, months later, why a message was deleted or an account removed. They are not used for any other purpose.

Two deadlines of their own, which the server keeps by itself: a minor's usage time is kept for 90 days and then deleted; the image of a screen-share report is deleted 180 days after the report is resolved — except in serious cases (exploitation, abuse or grooming of a child or teenager), where it is evidence an authority may request and is kept for as long as the law requires.

The 90 days after deleting your account

This is the part you need to know before you press Delete account, and that is why it has a heading of its own. The account disappears from Syden immediately — nobody can find it anymore, your messages vanish from conversations, your name leaves the lists. But a copy of what you wrote is kept for 90 days, outside the app, and only then deleted for good.

Why this exists. A court request usually arrives weeks after whatever prompted it. Without these 90 days, someone who committed a crime on Syden could delete their account and take the evidence with them — and we would have nothing to hand over to an authority that asks. It is also what Brazilian law expects from anyone hosting other people's conversations.

What is kept: who you were (username, display name, email, when you joined), what you wrote, when, in which channel, and the files you attached. What isn't kept: your password — not even scrambled. It is not evidence of anything, so there is no reason to keep it.

Nobody reads this through the app. There is no screen, button or address that shows this content — not even to whoever administers Syden. It can only be read by someone with direct access to the server, with a command made for that purpose, and that access is logged on the machine itself. After the 90 days, the server deletes it on its own, without depending on anyone remembering.

Your rights

Under Brazil's General Data Protection Law (LGPD), you can request access to, correction of or deletion of your data. Two things you can do yourself in the app, without asking anyone:

Take your data: under Settings → My account → Take your data, download a file with everything Syden stores about you. It works even if the account is banned or suspended.
Delete your account: under Settings → My account → Delete account. The account disappears from Syden immediately; a copy of what you wrote stays outside the app for 90 days, in case an authority requests it — see The 90 days after deleting your account, above.

For other requests — including correcting your date of birth —, write to [email protected], which is Syden's privacy channel and is read by whoever maintains it.

Security

All communication with the server is encrypted (HTTPS and secure media connections). The server has a firewall and only accepts the connections it needs, and it limits how many password attempts anyone can make, so that nobody can keep guessing yours. No system is 100% secure, but we take care to reduce the risks.

What is stored on the server is encrypted: the database and the files sit on an encrypted disk whose password is not kept on the server. A backup or a disk taken from there is unreadable without it. While the server is running, Syden reads this data normally, in order to work.

Calls are end-to-end encrypted: voice, camera and screen sharing are encrypted on the sender's device, and only the people in the room can decrypt them. The media server passes them along without being able to see or hear anything. Next to Voice connected, the lock shows a security code: if everyone on the call sees the same one, nobody is in the middle. The image in a stream report comes from the device of the person reporting it. Messages are not end-to-end encrypted: Syden stores them to show, search, moderate and answer legal requests, as described above.

Age

Syden is for people aged 13 or older. From 13 to 15, the account is linked to a father's, mother's or guardian's, and anyone under 18 starts with all protections on. The full rules are in the terms of use, section 2.

The gov.br age token. Syden has committed to adopting it as soon as the Brazilian government offers it to apps (see the terms). When that happens, age confirmation will go through your gov.br account, and Syden will receive only the confirmation of the age range — never the CPF, a document or the date. This policy will be updated beforehand, saying what starts being received.

The Windows age range. In the Windows app, on opening, Syden asks Windows for the age range of your Microsoft account (under 13, 13 to 15, 16 to 17, 18 or older). Windows never provides the date. Only when Microsoft has verified your age is the range sent to Syden, which stores the range and when it was received. It applies when it is younger than the date you entered (the account becomes more protected); the other way round, correcting the date is still done with whoever runs Syden. Without verification, nothing is sent. For this Windows asks for your "yes" under Settings → Privacy → Account info, and you can withdraw it at any time. The range is included in Take your data and is removed with the account.

Changes

If this policy changes, the date at the top is updated and the change goes into the list of what changed, below.

What changed, and when

Every time this policy changes, the change goes into this list, newest first. Any new third party that starts receiving anything appears here before it is turned on.

November 9, 2026 — in What we store, in your room: the name you give the room's pet, which whoever can visit also sees; and your 5 previous avatars (photos and GIFs you replaced), which only you see and can remove from the history; and each person's call ringtone and the ringtone groups, which go up with your preferences and only you see.
November 6, 2026 — in What we store: the highest Solo score in Burrow Traffic; and Burrow Toy Cars, with the best time and the throttle at each moment (the "ghost"), as in the race; and, in Burrow Bridge, the lowest Solo cost for each stage; and Burrow Obstacle Course, with the best time on each course and the controls at each moment (the "ghost"), as in the race; and Bunny session, with the highest score (in Solo or in a room session).
November 5, 2026 — in What we store: Jet Bunnies, Burrow Regatta and Barn Tower, with the best time and the path (the "ghost"), like the race; and the highest Solo score in Garden Pest Hunt and Burrow Squadron.
November 4, 2026 — in What we store: stickers, the ones you make and the ones you save from a conversation, and their check by Project Arachnid, like every image you upload.
November 3, 2026 — in What we store: the Bunny race, with the best time on each track and the kart's path, which only your accepted friends see, and the podium trophies from the room, with who you raced against; the Bunny jump, with the best time on each level and the bunny's path, in the same way; and your room: who can visit it, who you invited and the trophy shelf's featured items, which visitors see. No new third party.
October 25, 2026 — in the account: the display name, which you choose in My account and which everyone sees on Syden. It is also part of what is kept for 90 days after you delete your account.
October 20, 2026 — in Age: the age range Windows reports, only when verified by Microsoft, in the Windows app. No new third party: Microsoft already verifies age on its own account.
October 20, 2026 — in Security: calls (voice, camera and screen sharing) are now end-to-end encrypted, with a security code to check, and what is stored on the server now sits on an encrypted disk. And community achievements arrived: in What we store, the time spent streaming with two or more people watching and the room of each call session; in Who sees your data, the good examples. No new third party.
October 19, 2026 — What we store now includes the optional languages on the profile card (the ones you speak and the ones you are learning) and the times you sang karaoke (the community's ranking). And in For how long: when you delete your account, your call time and the times you sang stay in the community's total, only as a number. No new third party.
October 17, 2026 — protection of children and teenagers (ECA Digital): the date of birth is now asked of everyone, used only for the age range; for minors, we keep the account's rules, the link to the guardian and the daily usage time (90 days); the guardian sees what is described in Who sees your data; a screen-share report keeps the image of the moment, checked by Project Arachnid and deleted 180 days after the report is resolved, except in serious cases; bans and suspensions keep the reason and the appeal. The Age section carries the commitment to the gov.br age token. The channel for privacy requests is now [email protected]. No new third party.
October 13, 2026 — partner games were added: Termo can run inside Syden, only after you click it, and it uses Google Analytics.
October 10, 2026 — this English version was published. The text of the policy didn't change.
October 6, 2026 — What we store now includes the data from the new community features: roles, level points, warnings and timeouts, reminders, giveaways won and the optional birthday. No new third party: all of it stays on Syden's server.
October 3, 2026 — Google Fonts was added to the list of third parties. It was already being contacted to fetch fonts and wasn't declared here, which was our mistake. In the same fix, Syden stopped fetching fonts from Google for people using the Latin, Cyrillic or Greek alphabets: today it is only contacted for languages with other scripts.
October 2, 2026 — the section The 90 days after deleting your account was added: what is kept when you delete your account, for how long, who can read it and how it is deleted. The sentence saying that important changes would be announced inside the app was also removed: it promised a notice that never existed, and this list is the honest place to follow what changes.
September 29, 2026 — GIPHY was added to the list of third parties, because of the GIF picker.
September 28, 2026 — first version published.

Back to the website