Federation identity, how it works

Several federation tools share a single sign-in. The same email address signs you into compass, chart, lens, and people. This keeps invitations, role changes, and account deletion working across the federation without having to coordinate four separate accounts.

The shared sign-in lives at people.syntrociety.org. That service hosts the identity record (your email, session, and magic-link login) for every federation app.

For everything else, your assessment scores in compass, your records in chart, your documents in lens, only the specific app holds the data, and only that app decides what happens with it.

Who is responsible for what

For your identity data (email, session, login):

• people.syntrociety.org and the app you are using are joint controllers in the sense of Article 26 GDPR.
• Either side can answer access, correction, or deletion requests.
• We have a single point of contact at privacy@syntrociety.org that routes the request to the right team.

For your app data (the things you do inside the app):

• Only the app you are using is the controller.
• The app's own privacy notice explains what it holds, why, and for how long.

What this means in practice

You only need to write one email to exercise your rights. We sort out internally which side processes what part of the request. You can view and download your federation data, and request deletion, on people.syntrociety.org.

If you ask people to delete your account, we coordinate with each federation app to remove your data there as well, before the identity record itself is removed. This protects against the account silently lingering in one app after the others have cleaned up.

When this arrangement applies

This page applies to compass.syfers.eu, chart.syfers.eu, and lens.syfers.eu. The marketing surfaces syfers.eu and syntrociety.org are sole controllers of their own visitor data and do not use the shared sign-in.

Questions about identity data go to privacy@syntrociety.org.