Privacy policy

• Your student email (@student.unimelb.edu.au) — used to verify you're a current UniMelb student and to sign you in. It is never shown publicly and is not returned by any public API.
• An auto-generated pseudonym (e.g. “collins_street_4213”) — this is what other users see. It is not derived from your name or email.
• Anything you post — reviews, replies, community posts, upvotes, subject ratings, and reports you submit.
• Optional profile details — year of study, faculty, and major, if you choose to add them.
• Basic usage and error data — page views and product usage (via PostHog) and crash/error reports (via Sentry), used to fix bugs and understand what's working. This can include device/browser type and general technical context around an error.
• Standard session cookies — used only to keep you signed in. We don't use third-party advertising or tracking cookies.

To verify you're eligible to use Syllyth, keep you signed in, show your posts under your pseudonym, let you follow subjects and manage your own content, moderate reports and enforce our terms, and fix bugs and improve the product.

We do not sell your data, and we do not use it for advertising.

Posts, replies, upvote counts, and pseudonyms are visible to anyone browsing Syllyth, including people who haven't signed up. Your email address is never public and is stripped from every API response that isn't your own authenticated session.

We use a small number of service providers to run Syllyth:

• Supabase — authentication and database hosting.
• Sentry — error monitoring.
• PostHog — product analytics.
• Resend — transactional email (e.g. admin notifications).

These providers process data on our behalf and may store it on servers outside Australia. We don't share your information with anyone else, and we don't sell it.

If you delete your account, your login and profile are removed. Posts you've made stay up (so conversations aren't broken for other students) but are reattributed to “deleted user” and disconnected from your account.

You can edit or delete your own posts and profile details at any time, and delete your account from your profile page. For anything you can't do yourself — like requesting a copy of your data or a manual deletion — contact us using the details below.

If we make material changes to how we handle your data, we'll update this page and change the date at the top. Continuing to use Syllyth after a change means you accept the update.

Questions about this policy or your data can be sent to the Syllyth team via the community page or through the report tool on any post.