SYSLXSYSLX

Privacy

Last updated 16 September 2026.

This page describes what the SYSLX launcher, website and API store about you.

What we store

  • Account: your username, email address and, if you give one, your Discord name.
  • Password: only an Argon2id hash. We cannot read your password, and support will never ask for it.
  • Device identifier: a SHA-256 fingerprint derived from your motherboard, CPU and boot disk serial numbers. It is a one-way hash; the serials themselves never leave your PC and cannot be recovered from it.
  • Sessions: a hashed session token, the IP address it was issued to, and when it was last used. You can see and revoke these in the panel.
  • Security log: sign-ins, failed sign-ins, key redemptions, device resets and administrator actions, with the IP address and a short structured note. Passwords and tokens are filtered out before anything is written.

What we do not store

  • Anything about what you do inside the game. The menu does not report your activity to us.
  • Payment details. Purchases go through the shop provider, which we do not host.
  • Analytics or advertising identifiers. This site loads no tracker, no third-party script, and no third-party font or style - every asset is served from this domain, so no other company sees that you visited.

Why we store it

The account and device identifier exist to enforce one license per person. The session records exist so you can see where you are signed in and end it. The security log exists so that account theft and abuse can be investigated, and so we can see who changed what when something goes wrong.

How long

  • Account data: until you ask us to delete the account.
  • Sessions: usable for 30 days or until you revoke them; the record is then deleted within about a week.
  • Security log: 180 days, then deleted by a nightly job.
  • Rate-limit counters: 24 hours.

Deleting your account

Ask on Discord or email service@syslx-menu.com from the address on the account. We remove the account, its sessions and its device binding. Entries in the security log are anonymised rather than deleted, so the log stays complete.

Who else sees it

Nobody. The database runs on our own server and is not shared with a third party, sold, or used for anything other than running SYSLX.