Privacy Policy
Last updated: March 26, 2026
1. Introduction
SYR1 Unofficial ("we," "us," or "our") operates a community blog and newsletter for Amazon SYR1 associates. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website. We are not affiliated with Amazon.com, Inc.
2. Information We Collect
Information from Discord OAuth
When you sign in via Discord, we receive and store the following from your Discord account:
- Discord user ID and username
- Display name
- Email address
- Profile avatar URL
- Email verification status
We also store OAuth tokens (access token, refresh token) server-side to maintain your session. These tokens are never exposed to the browser.
User-Generated Content
When you use our site, you may voluntarily provide additional information including:
- Profile biography text
- Custom profile avatar images
- Comments on blog posts
- Blog post content (if you are a contributor)
- Uploaded images and media files
Automatically Collected Information
We use a single essential cookie for session authentication. We do not use analytics cookies, tracking pixels, or marketing cookies. We do not log IP addresses or collect browser fingerprints.
3. How We Use Your Information
We use the information we collect to:
- Authenticate your identity and maintain your session
- Display your name and avatar on comments and posts you create
- Manage user roles and permissions
- Moderate content and enforce community guidelines
- Store and serve media files you upload
- Periodically refresh your Discord avatar to keep it up to date
4. Third-Party Services
We rely on the following third-party services:
- Discord — For OAuth-based authentication. Discord's privacy policy
applies to your Discord account. We only request the
identifyandemailscopes. - S3-Compatible Storage — Uploaded media files are stored in S3-compatible object storage. Files are served through our server and are not directly accessible to third parties.
We do not sell, trade, or share your personal information with third parties for marketing purposes.
5. Data Retention
- Session data: Sessions expire after 30 days of inactivity. Session tokens are deleted on sign-out.
- Account data: Your account information is retained as long as your account exists. You may request account deletion at any time.
- User content: Comments, posts, and uploaded media are retained until you or a moderator removes them.
6. Your Rights Under California Law (CCPA/CalOPPA)
If you are a California resident, you have the right to:
- Know what personal information we collect about you and how it is used.
- Request deletion of your personal information.
- Opt out of the sale of personal information. We do not sell your personal information.
- Non-discrimination for exercising your privacy rights.
To exercise any of these rights, contact us using the information in Section 10 below.
Do Not Track Disclosure
We do not track users across third-party websites. Our site does not respond to Do Not Track browser signals because we do not engage in tracking to begin with.
7. Data Security
We use reasonable administrative, technical, and physical security measures to protect your personal information. Authentication tokens are stored server-side and are never exposed to the browser. Session cookies are HttpOnly and secure. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
8. Children's Privacy
Our service is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us so we can promptly remove it.
9. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. We encourage you to review this page periodically. Continued use of the site after changes constitutes acceptance of the updated policy.
10. Contact Us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, you may reach us through our community channels or by contacting a site operator.