cloud servers see an image
uploads, ever
accounts required
Bluetooth hop, in the room
The architecture, in one paragraph
A Synsco mirror is a stage for your own phone's camera. The Lite kit holds the phone in a motorised cradle behind the glass; the Flagship hides a camera behind a two-way pane and talks to the phone over Bluetooth in the room. In both, the trigger (a countdown, a thumbs-up, a swipe on the strip) is turned into a shutter key press, sent over Bluetooth HID (Human Interface Device, the same protocol as a keyboard), and your phone's own camera app takes the picture into its own library. There is no Synsco server in that path. There is no Synsco app that sees the image. Gesture recognition runs on the ESP32 in the frame or on the phone, never remotely.
The organizer features (grouping shots by look, day or outfit) run on the phone. Synsco publishes the firmware and the software under open licences (MIT and Apache-2.0 for software, CERN-OHL for hardware) so that this claim can be checked rather than trusted.
What Synsco ID stores
Synsco ID is an optional account for the store-and-service side: saved Full mirror configurations, order status, device registration and firmware. Signing in uses an emailed link; there are no passwords. This is everything it can hold:
| Record | Fields | Why |
|---|---|---|
| User | email address, creation date, newsletter yes/no | To send you the sign-in link and to know which records are yours. |
| Session | a hash of the session cookie, its expiry (30 days), your browser's user-agent string | To keep you signed in and to let you recognize a session you want to end. |
| Configuration | a name you choose, the configurator's settings (dimensions, shape, edge, glass, lighting, coating, camera position, mount), an optional small rendered thumbnail of that shape, a share slug, dates | So you can come back to a mirror you designed and share it with a partner or contractor at a read-only link. |
| Order | status, dates, notes the founders write (for example, "Glass arrives Tuesday"), a link to a configuration | To show the timeline of a Full or assembled Lite order. |
| Device | the serial printed on the frame, model, a name you choose, the firmware version it reported, the last time it checked for firmware | Warranty, and so the firmware can ask "is there a newer release?" once a day if you opt in. |
| Quote or contact message | what you typed in the form, your email, the configuration if you attached one, your IP address for abuse prevention | To answer you. Delivered by email; not kept in the database. |
Not stored, by design: photographs or video of any kind, gesture data, camera frames, the contents of your phone, your location, payment card numbers (payments for made-to-order mirrors are invoiced separately), a password.
Short-lived data: a sign-in token lives for 15 minutes and is deleted the moment it is used. Rate-limit counters (a hash of your email, your IP address) live for at most one hour.
Retention
- Account records are kept while the account exists.
- Sessions expire after 30 days; signing out deletes them at once.
- Order records are kept for the warranty period of the mirror they belong to and are deleted with the account unless an accounting rule requires an invoice copy, which is kept outside Synsco ID.
- Contact and quote emails are kept in the founders' mailbox only as long as the conversation lasts.
- Server logs at Cloudflare are the platform's standard request logs, retained by Cloudflare for a short, fixed period. Synsco does not add tracking of its own.
Deletion
On the account page, Profile has one button: Delete my ID and everything in it. It removes your user record, sessions, configurations, orders and their events, and devices, in a single transaction. Shared links stop working immediately. There is no grace period and no copy kept, because there is nothing worth keeping without you.
If you cannot sign in (for example, you no longer control the email address), write to the privacy contact below from any address; we will verify ownership by other means and delete by hand.
This website
- No analytics script, no advertising pixels, no third-party fonts at run time; the wordmark font is served from sysnco.ca.
- Two cookies, both only after you sign in: the session cookie (HttpOnly) and a one-byte hint so the site knows whether to ask the account service at all. Visitors who never sign in make zero calls to our API.
- Forms (sign-in, contact, quote) are protected by Cloudflare Turnstile, which runs a challenge in your browser and shares no identity with us.
- The site is served by Cloudflare Pages from Canada and the rest of Cloudflare's network. Cloudflare is a processor for Synsco under its standard terms.
- Email is delivered through Resend. It sees the address, the subject and the body of transactional messages we send you, and nothing else.
Your rights and PIPEDA
Synsco is a Canadian company and follows the Personal Information Protection and Electronic Documents Act (PIPEDA). You can ask what we hold about you, ask us to correct it, withdraw consent, and ask us to delete it; the account page does the last one without asking us. We answer access requests within 30 days. If you are not satisfied, you may complain to the Office of the Privacy Commissioner of Canada.
We do not sell personal information, do not use it for advertising, and do not transfer it outside the processors named above.
Privacy contact
Privacy officer, Synsco, Toronto, Canada. Email [email protected] with "Privacy" in the subject. We will confirm receipt within two business days.
Changes to this policy are dated at the top of the page. The previous wording stays available in the site's open-source repository history.