What AnyTogether keeps,
and why.

anytogether.kodla.agency is run by the maintainer of the open source AnyTogether project, Utku Halis (kodla.agency). The maintainer decides what this server keeps and is responsible for it.

AnyTogether is open source: anyone can run their own server, and the AnyPS5 apps can sign in to one. A server at another address is run by its own operator, who decides how it handles data. This notice does not cover it.

The AnyPS5 apps (the Mac launcher, the Windows and Linux launcher, and AnyPS5 Remote on your phone) use this same server when you sign in to AnyTogether in them, so this notice covers what they send here too. What the apps keep on your own computer or phone stays there.

Only what a feature needs, grouped by what it is for:

Account and sign-in

Your email address; the ways you sign in (email codes, passkeys and, where this server offers them, Discord, Google or Apple); and where you are signed in: the app or browser, a device name, when it was last used. There are no passwords. Sign-in codes and session tokens are kept only as hashes.

Profile

Your handle (an old one is held for you for 30 days after a change), display name, avatar, bio, country, the languages you play in, and your privacy and notification settings. An uploaded avatar is turned into a small JPEG without its metadata.

Friends

Your friends and friend requests, the people you block, and your reactions to friends' activity.

Messages

Direct and group messages with their edits and replies, how far you have read, and the photos, clips and voice notes you send. A message you delete is emptied at once; only its place in the thread stays.

Parties, calls and share play

Which party you are in, invites and requests to join, and when calls start and end. The sound of a call and the picture of a share play go straight between the people in it (or through this server's relay when a direct connection is impossible) and are never recorded.

Games

What the AnyPS5 launchers report: your play sessions (the game, when it started and ended, whether it closed normally), your library and play time, the trophies you earn and when, and your computers (a random ID, the platform, a name and a model). Your activity feed and the leaderboards are made from these.

Cloud saves and media

The save archives your launcher uploads (the newest three versions of each slot) and the photos, clips and voice notes you post, up to 100 MB per account on this server. Photos are re-encoded without their metadata; clips and voice notes are kept as sent.

What you share

Themes you share in the Theme Hub, compatibility reports (the game, platform, versions, your machine and operating system, the frame rate and your note) and looking-for-group posts.

Families

If you are in a family: your role in it, a child's limits as the parents set them, the child's requests to the parents, and a log of changes for the parents. See Children and families.

Linked accounts

If you link Steam or Discord: that account's ID and name (and Discord username), and whether you hide the badge. Never a password or a token.

Notifications

Your notifications on the site and, for each browser you turn notifications on in, the address of its push service, the keys to encrypt notifications for it, and its language.

Moderation

Reports you send and reports about you (a reported message is copied for the moderators as it was), warnings, mutes and bans with their reasons, appeals and their answers, and a log of what moderators and the system did.

Your IP address

Used to count requests against abuse limits, for example sign-in attempts. These counters are kept in memory under the address and run out with their limit, within a day. AnyTogether's own code does not write IP addresses, or anything you write, to its logs.

• Anyone, signed in or not: your profile card (handle, display name, avatar, bio, country), the themes you share and your looking-for-group posts. Compatibility reports are shown without your name.
• Your friends, everyone, or nobody, as you choose in Settings → Privacy: your games and play time, trophies, friends list, online status and the game you are playing, and your gallery. Out of the box these are for friends only, and others can find you by search. Leaderboards and player suggestions follow the same settings.
• The members of a conversation see its messages; the people in a party or a call see who else is there.
• In a call or a share play the others' devices connect to yours, so they can learn your IP address, as in any peer-to-peer call.
• Moderators see what is reported to them and the restrictions and appeals they handle. Whoever runs the server can technically reach everything on it, messages included: they are not end-to-end encrypted.
• Parents and a family's manager see what Children and families describes.

Everything is stored on the server that runs this AnyTogether instance. A few features need an outside service:

• Mail: sign-in codes and the other mails below go out through a mail delivery service, which handles your address and the mail.
• Browser notifications, when you turn them on: your browser maker's push service (for example Google, Apple or Mozilla) delivers them. What they say is encrypted for your browser.
• Steam and Discord, only when you link them or sign in with them: you sign in on their site and they tell this server who you are. The same for Google and Apple, where this server offers them.
• An avatar taken from Discord, Google or Apple loads from that service.
• Downloads lead to GitHub, where AnyPS5 is released. This site reads the list of releases from GitHub itself, so visiting tells GitHub nothing until you download.
• There are no analytics, advertising or social media scripts on this site, and its fonts are served by this site itself.

The website sets only these cookies, all of them needed for it to work, which is why it asks for no consent:

Your browser also keeps your voice chat choice (push to talk or open mic) in its local storage. When you are signed in, the site adds a small service worker that shows notifications and a page saying you are offline when there is no connection. It stores only that page, never your data.

• Sign-in codes and links, when you ask for them.
• A code to confirm deleting your account.
• A digest of the messages and friend requests you missed, only if you turn it on: at most every 6 hours, without the messages' text.
• When a family manager makes a child account for an address: one mail to that address saying who made it.
• A weekly family summary for parents who turn it on: play time, the games played most and new friends. No messages.

No newsletters, no marketing. Turn the optional mails off in Settings.

• To provide the service you signed up for: your account, profile, friends, messages, games and files, which is most of the above.
• Our legitimate interest in keeping the service safe and fair: abuse limits, reports, moderation and the record of restrictions.
• Your consent, which you can take back at any time: browser notifications, mail digests, family summaries, linked accounts, and compatibility reports sent from the launcher.

Your data is not used for advertising or profiling, and it is not sold.

• Your account and everything in it: until you delete the account. Deleting hides your profile and signs out every device at once, and 14 days later everything is deleted for good (signing in during those days cancels it). Your messages are emptied, so the others' conversations keep their order.
• A few things outlast an account, without its name: compatibility reports, the games a launcher was first to add to the catalogue, and reports the account sent. A report about a message keeps its copy of that message. A ban on an email address keeps only a hash of the address, so it can still be enforced, and the moderation log keeps the account's ID.
• Sign-in codes: deleted 30 days after they expire. Notifications: read ones after 90 days, all after 180 days. A sign-in on a device ends after 90 days without use. Old handles: 30 days.
• Cloud saves: the newest three versions of each slot, until you delete them. Photos and clips nobody sent or pinned: deleted after a day, as are unfinished uploads.
• Looking-for-group posts close within a day; abuse counters run out within a day.
• If the server's operator keeps backups, deleted data can remain in them until those backups are deleted too.

In Settings you can:

• choose who sees what;
• download everything this server holds about your account as one file, with links to your saves and media;
• delete your account;
• see and sign out your devices, remove passkeys, unlink Steam or Discord, and turn notifications and mails off.

Depending on where you live, laws such as the EU's GDPR or Turkey's KVKK give you more rights: to access, correct, delete or move your data, to object to or restrict how it is used, and to complain to your data protection authority. For anything Settings does not cover, see Contact.

Families are opt-in. A manager makes a family and brings people in: parents, other adults and children. A child account that a manager makes waits for the child's own confirmation, and anyone added to a family they do not know can leave it with "This is not my family".

Parents choose what a child may do: play time, age ratings, who may message, call or send friend requests. They answer the child's requests (more time, a new friend, a game), see the child's play time, the games they play and the friends they add, and can get a weekly summary. They do not see the child's messages.

If you are under the age at which your country lets you use online services on your own, use AnyTogether only with a parent's permission, ideally in a family.

Connections are encrypted (HTTPS). There are no passwords to leak: sign-in codes, session tokens and family codes are stored only as hashes, and a passkey leaves only its public key here. Messages are not end-to-end encrypted, so do not send anything you would not want the server's operator to be able to read.

When this notice changes, so does the date at the top. Every change is public in the AnyTogether repository.

Questions, requests or something wrong: open an issue at github.com/utkuhalis/AnyTogether. Issues are public, so keep personal details out of them; for a private matter, say so in the issue and ask for a private way to reach the maintainer.