What AnyTogether keeps,
and why.

anytogether.net is run by the maintainer of the open source AnyTogether project, Utku Halis (kodla.agency). The maintainer decides what this server keeps and is responsible for it.

AnyTogether is open source: anyone can run their own server, and the AnyPS5 apps can sign in to one. A server at another address is run by its own operator, who decides how it handles data. This notice does not cover it.

The AnyPS5 apps (the Mac launcher, the Windows and Linux launcher, and AnyPS5 Remote on your phone) use this same server when you sign in to AnyTogether in them, so this notice covers what they send here too. What the apps keep on your own computer or phone stays there, such as the log of a game's online calls that the Mac launcher writes on your Mac when you turn on Online play: it is never sent here.

Only what a feature needs, grouped by what it is for:

Account and sign-in

Your email address; the ways you sign in (email codes, passkeys and, where this server offers them, Discord, Google or Apple); and where you are signed in: the app or browser, a device name, when it was last used. There are no passwords. Sign-in codes and session tokens are kept only as hashes.

Profile

Your handle (an old one is held for you for 30 days after a change), display name, avatar, bio, country, the languages you play in, a cover and an accent colour, the trophies and games you pin to your showcase, your trophy level (worked out from your trophy points), your privacy, public profile, notification and Appear offline settings, and, if you set them, a private name and a private picture for your friends. An uploaded avatar or private picture is turned into a small JPEG without its metadata.

Friends

Your friends and friend requests, the people you block, and your reactions to friends' activity. And, so you can find them again, who you were with in a party, a share play, an online game or a looking-for-group game, with the game and when (Recently played with). This is on until you turn it off on the Recently played with page, which also deletes the list, and each person is forgotten 90 days after you last played together.

Online status

While an app or the site is open: which of your devices are online and what you are playing, kept in memory and gone about two minutes after a device's last sign of life, and when each device was last used. With Appear offline everyone sees you as offline, but the server still knows you are connected, so messages and calls reach you.

Messages

Direct and group messages with their edits (at most 20 per message) and replies, the reactions you add and who added them, how far you have read, how far your devices have received (delivered), whether you send read receipts, the conversations you pin or mute, and the photos, clips and voice notes you send. Reactions and these marks stay as long as the message and your place in the conversation do. A message you unsend (your own, at any time) is emptied at once: its text, media and reactions go, and only its place in the thread stays as "message removed".

Parties, calls and share play

Which party you are in, invites and requests to join, a party's Discord link if its members add one, join codes (who made one, for what, and when it stops working: after 24 hours unless chosen otherwise, 72 at most), and calls: who called whom, and when the call started, was answered and ended. The sound of a call and the picture of a share play go straight between the people in it (or through this server's relay when a direct connection is impossible) and are never recorded.

Games

What the AnyPS5 launchers report: your play sessions (the game, when it started and ended, whether it closed normally), your library and play time, the trophies you earn and when, and your computers (a random ID, the platform, a name and a model). When you play online, play together with your party or join a friend's game: the game session (the game and its version, the AnyPS5 version, the party it belongs to, who is in it, each player's game version and whether they chose to try anyway with a version that did not fit, and what the game shares with the other players). Your activity feed and the leaderboards are made from these.

Cloud saves and media

The save archives your launcher uploads (the newest three versions of each slot) and the photos, clips and voice notes you post, up to 100 MB per account on this server. Photos are re-encoded without their metadata; clips and voice notes are kept as sent.

Captures

The screenshots and clips you post as captures, with their caption (and when you last edited it), the game, where you posted from and who may see them (your friends, or everyone signed in), the likes you give and get, and the comments and replies you write. Pictures are re-encoded without their metadata, like every photo.

What you share

Themes you share in the Theme Hub, compatibility reports (the game, platform, versions, your machine and operating system, the frame rate and your note) and looking-for-group posts.

Communities and events

The communities you make or join and your role in them, invites, the members a community's moderators remove or ban (with the reason they give), the community's chat (kept like other messages), and the events you plan or say you are going to.

Families

If you are in a family: your role in it, a child's limits as the parents set them, the child's requests to the parents, and a log of changes for the parents. See Children and families.

Linked accounts

If you link Steam or Discord: that account's ID and name (and Discord username), and whether you hide the badge. Never a password or a token.

Notifications

Your notifications on the site and, for each browser you turn notifications on in, the address of its push service, the keys to encrypt notifications for it, and its language.

Moderation

Reports you send and reports about you (a reported message, or a reported private name and picture, is copied for the moderators as it was), warnings, mutes and bans with their reasons, appeals and their answers, and a log of what moderators and the system did.

Your IP address

Used to count requests against abuse limits, for example sign-in attempts. These counters are kept in memory under the address and run out with their limit, within a day. When a call or a share play goes through this server's relay, the relay sees your IP address and writes the connection, with your account's ID, to its own log, which is deleted after 7 days. The mail server's log of who a mail went to is deleted after 30 days. There is no web access log, and AnyTogether's own code does not write IP addresses, or anything you write, to its logs.

• Anyone, signed in or not: your handle, display name and avatar (the minimal card), the themes you share and your looking-for-group posts. With your public profile on (Settings → Privacy) they also see the rest of your profile card (bio, country, cover and accent colour, and the Steam or Discord badges you have not hidden) and whatever you set to everyone. The public profile is off for a new account; an account that already showed something to everyone when the switch came (a part set to everyone, discovery on, or a linked account shown) kept it on, and a child's is always off. Off, people who are not your friends get the minimal card and nothing else, in link previews too. Compatibility reports are shown without your name. Profile pages ask search engines not to list them. Whoever has a join code you made sees your profile card, the game and how many are in the party.
• Your friends, everyone, or nobody, as you choose in Settings → Privacy: your games and play time, trophies (with your trophy level, and comparing trophies with you), friends list, online status and the game you are playing, and your gallery. Out of the box these are for friends only, and others can find you by search. Everyone only means everyone while your public profile is on; off, it works like friends. Your showcase, leaderboards, levels in lists, activity and player suggestions follow the same settings.
• Only you and your accepted friends: your private name and private picture, set in Settings → Friends only. Your handle is your public ID; these are not. They are never shown in search (nor searched by), on your public profile or link previews, to people you only share a party, a conversation, a game or a community with, to anyone you blocked or who blocked you, or in moderators' lists. When a friendship ends they stop being shown; a link to the private picture a former friend already had stops working within 12 hours. A friend can report them: the moderators then see them as they were, and can clear them.
• The members of a conversation see its messages and their reactions, with who reacted; in a direct conversation the other person sees when a message reached one of your devices. With read receipts on (the default, in Settings → Privacy) the members also see how far you have read; turn them off and they do not, and you do not see theirs. The people in a party or a call see who else is there, and only a party's members see its Discord link. Only you see your Recently played with list; the people on it see you on theirs.
• Anyone signed in sees a public community, its members (with their role and when they joined) and who is going to its events; an invite-only community is seen only by its members.
• In a call, a share play or an online game the others' devices connect to yours, so they can learn your IP address, as in any peer-to-peer connection.
• Your captures: a Friends post is seen only by you and your friends; a Public one by anyone signed in on the game's page and in the Captures feed of people who played with you, and on your profile when it is public (your friends always see it there). They are never on your signed-out profile or in link previews. Whoever can see a post sees its comments and the number of likes; the list of who liked it shows its author everyone, and others only their friends and people whose search setting is everyone. No one you blocked, or who blocked you, sees your posts, likes or comments, and you do not see theirs. A child's posts are for friends only.
• Moderators see what is reported to them and the restrictions and appeals they handle; a community's moderators see its members and can remove or ban them from it. Whoever runs the server can technically reach everything on it, messages included: they are not end-to-end encrypted.
• Parents and a family's manager see what Children and families describes.

Everything is stored on the server that runs this AnyTogether instance. A few features need an outside service:

• Mail: sign-in codes and the other mails below go out through a mail delivery service, which handles your address and the mail.
• Browser notifications, when you turn them on: your browser maker's push service (for example Google, Apple or Mozilla) delivers them. What they say is encrypted for your browser.
• Steam and Discord, only when you link them or sign in with them: you sign in on their site and they tell this server who you are. The same for Google and Apple, where this server offers them.
• An avatar taken from Discord, Google or Apple loads from that service. Some games' icons, and profile covers made from them, load from the site that keeps the icon (only sites this server allows), which then sees your IP address.
• To draw the picture shown when someone shares a link to a profile, this server asks Google Fonts for the letters it needs. That request contains the profile's name, handle and bio, which are public anyway, but nothing about who is looking.
• Downloads lead to GitHub, where AnyPS5 is released. This site reads the list of releases from GitHub itself, so visiting tells GitHub nothing until you download.
• There are no analytics, advertising or social media scripts on this site, and the fonts your browser loads come from this site itself.

The website sets only these cookies, all of them needed for it to work, which is why it asks for no consent:

Your browser also keeps your voice chat choice (push to talk or open mic) in its local storage. When you are signed in, the site adds a small service worker that shows notifications and a page saying you are offline when there is no connection. It stores only that page, never your data. Installing the site as an app (Add to Home Screen) stores nothing more.

• Sign-in codes and links, when you ask for them.
• A code to confirm deleting your account.
• A digest of the messages and friend requests you missed, only if you turn it on: at most every 6 hours, without the messages' text.
• When a family manager makes a child account for an address: one mail to that address saying who made it.
• A weekly family summary for parents who turn it on: play time, the games played most and new friends. No messages.

No newsletters, no marketing. Turn the optional mails off in Settings.

• To provide the service you signed up for: your account, profile, friends, messages, games and files, which is most of the above.
• Our legitimate interest in keeping the service safe and fair: abuse limits, reports, moderation and the record of restrictions.
• Your consent, which you can take back at any time: browser notifications, mail digests, family summaries, linked accounts, and compatibility reports sent from the launcher.

Your data is not used for advertising or profiling, and it is not sold.

• Your account and everything in it: until you delete the account. Deleting hides your profile and signs out every device at once, and 14 days later everything is deleted for good (signing in during those days cancels it). Your messages are emptied, so the others' conversations keep their order. A community you own passes to one of its moderators or members (or ends when no one is left), and its name and description stay; events you planned stay without your name; you disappear from everyone's Recently played with.
• A few things outlast an account, without its name: compatibility reports, the games a launcher was first to add to the catalogue, and reports the account sent. A report about a message keeps its copy of that message. A ban on an email address keeps only a hash of the address, so it can still be enforced, and the moderation log keeps the account's ID.
• Sign-in codes: deleted 30 days after they expire. Notifications: read ones after 90 days, all after 180 days. Recently played with: 90 days after you last played together. A sign-in on a device ends after 90 days without use (the record of it stays with your account). An old handle is held for you for 30 days (the list of your past handles stays with your account).
• Cloud saves: the newest three versions of each slot, until you delete them. Photos and clips nobody sent, pinned or posted: deleted after a day, as are unfinished uploads. Captures, their likes and comments: until you delete them or the account; deleting a post takes its likes and comments with it, and its media unless something else uses it. A moderator may remove a reported post or comment.
• Looking-for-group posts leave the board within a day (the post stays with your account); join codes stop working when they run out; abuse counters run out within a day. Push notification addresses go when you turn notifications off, sign out of that browser, or the push service says it is gone.
• With no shorter limit, these stay until your account is deleted: call records, parties and their Discord links, game sessions, join codes, and community events, invites and bans (or until the community is deleted). Reports, restrictions, appeals and the moderation log have no set end.
• This server's database and files are backed up every night, and each backup is deleted after 14 days. What you delete, or a deleted account, can remain in a backup until that backup is deleted. If backups are also kept with an outside storage provider, they will be encrypted before they leave this server, follow the same 14 days, and the provider will be named here.

In Settings you can:

• choose who sees what;
• download what this server holds about your account as one file (your account, profile, friends, messages, games, communities, captures with your comments and likes, Recently played with and more), with links to your saves and media. A few records are not in it yet: calls, parties, game sessions, and the themes and compatibility reports you shared; ask for them under Contact;
• delete your account;
• see and sign out your devices, remove passkeys, unlink Steam or Discord, appear offline, turn Recently played with off, and turn notifications and mails off.

Depending on where you live, laws such as the EU's GDPR or Turkey's KVKK give you more rights: to access, correct, delete or move your data, to object to or restrict how it is used, and to complain to your data protection authority. For anything Settings does not cover, see Contact.

Families are opt-in. A manager makes a family and brings people in: parents, other adults and children. A child account that a manager makes waits for the child's own confirmation, and anyone added to a family they do not know can leave it with "This is not my family".

Parents choose what a child may do: play time, age ratings, who may message, call or send friend requests. They answer the child's requests (more time, a new friend, a game), see the child's play time, the games they play and the friends they add, and can get a weekly summary. They do not see the child's messages.

Parents also choose whether a child may use communities and their events (off at first). Recently played with is on for children as for everyone, and a child can turn it off; parents do not see that list or the child's communities.

If you are under the age at which your country lets you use online services on your own, use AnyTogether only with a parent's permission, ideally in a family.

Connections are encrypted (HTTPS). There are no passwords to leak: sign-in codes, session tokens and family codes are stored only as hashes, and a passkey leaves only its public key here. Messages are not end-to-end encrypted, so do not send anything you would not want the server's operator to be able to read.

When this notice changes, so does the date at the top. Every change is public in the AnyTogether repository.

Questions, requests or something wrong: open an issue at github.com/AnyTogether/AnyTogether. Issues are public, so keep personal details out of them; for a private matter, say so in the issue and ask for a private way to reach the maintainer.