Privacy Policy
PS Trophies — last updated 3 August 2026
PS Trophies is an independent PlayStation Network companion app built by Indiesoftware. It shows your trophies, games, friends and messages, and adds communities, reviews, deals and widgets on top.
This policy covers every version of the app — the free, ad-supported versions and the paid version — and the web pages and backend services behind them. Where a version behaves differently, it is called out explicitly.
The short version
- We never see your PlayStation Network password. Sign-in happens on Sony's own page.
- Your trophies, games, friends and PSN messages are fetched from Sony straight to your device and cached there. They are not copied to our servers.
- What we do store is what you deliberately create: community posts, reviews, feedback, favourites, price alarms — plus the identifiers needed to attach them to you.
- We do not sell your data, and we do not build advertising profiles ourselves.
- The free versions show ads; the paid version contains no ads and never starts the ads SDK.
- In Europe and the UK we ask for your consent before any ad loads, and you can change that answer at any time in Settings → About → Privacy options.
- You can erase everything we hold, from inside the app, at any time.
Who is responsible
The data controller is Indiesoftware. For anything in this policy, contact [email protected].
PS Trophies is not affiliated with, endorsed by or sponsored by Sony Interactive Entertainment. "PlayStation" and "PSN" are trademarks of their respective owners.
Signing in with PlayStation Network
To show your data, the app needs you to sign in to PSN. That sign-in runs through Sony's own login page, loaded inside the app. We never receive, see or store your PSN password or your Sony account credentials.
What comes back is an access token. It is stored on your device only and used to call Sony's APIs directly from your phone. It is never sent to our backend.
Your use of PlayStation Network is governed by Sony's own privacy policy, not this one.
Data that stays on your device
Most of what the app shows you never leaves your phone. It is stored in a local database and in local preferences so the app works quickly and offline:
- Your PSN profile, trophies, trophy progress, games and play time
- Your friends list and the profiles of players you look at
- Your PSN messages and conversations, including media you receive
- Your PSN access token and session
- App settings, theme, filters, sort order, language and notification preferences
- Downloaded images and game artwork (image cache)
- Your advertising-consent decision, in the free versions — see Advertising below
None of this is transmitted to us. Uninstalling the app removes it. Clearing the app's storage removes it.
Data we store on our servers
Our backend runs on Google Firebase (Firestore, Realtime Database, Cloud Storage, Cloud Functions). The app signs in to Firebase anonymously — that anonymous identity is not a real account and holds no personal details of its own.
Here is everything we hold, and why:
| What | Why |
|---|---|
| PSN account ID and online ID | To attach the items below to you, and to address notifications to your devices |
| Community posts and chat messages | To deliver them to the communities you post in. Includes text, reactions, votes, stickers, GIF references and link previews |
| Images you attach | Message attachments, community group images and your profile background. Uploaded only when you pick them |
| Game reviews | Your star rating and review text, shown publicly next to the game |
| Feedback | Feedback you send us, and any screenshot you attach to it |
| Favourites | The players you marked as favourites, so the list follows you across devices |
| Wishlist price alarms | The games you want to be told about when the price drops |
| Push registrations | A push token, a Firebase installation ID, a hash of your device model, the app version and a timestamp — one record per device you signed in on |
| Deals subscription | Whether you asked to be notified about store deals |
| Community presence | A short-lived "online in this community" flag, so members can see who is around |
| Moderation records | Reports you file, and reports filed about your messages, with a copy of the reported message |
The "hash of your device model" is derived from your phone's brand and model name. It is not a unique device identifier and is not used to track you — it distinguishes one of your own devices from another so notifications are not sent twice.
What is deliberately not there
- No email address. The app never asks for one and never stores one.
- No real name. Your PSN display name is rendered on your device only.
- No passwords. See the PSN sign-in section above.
- No payment details or purchase history. See Purchases below.
- No precise location, contacts, calendar, health data, call logs or SMS. The app requests no permission for any of them.
- No audio recording. Voice messages are hosted by Sony and played, never recorded.
- No broad photo access. Images are chosen through the Android photo picker, so only the specific pictures you select are ever readable by the app.
What other people can see
PS Trophies is partly a social app. When you take part in it, other users can see your PSN online ID and avatar, the community messages and reactions you post, the game reviews you write, images you attach to messages, your profile background, and whether you are currently active in a community.
Community posts and reviews are visible to other users of the app and are not private messages. Treat anything you post there as public.
Community content and moderation
Community content is not reviewed before it is published. Anyone can report a message from the app; reports reach our moderation tools and a private moderator channel, and a moderator can delete the message. Deleting a message also removes its stored image attachment.
Our community guidelines set out what is allowed.
When you erase your data, moderation records are anonymized rather than deleted:
the identifiers are replaced with [deleted] and the record itself is kept. Deleting
them outright would let abuse history be erased on demand; keeping the identifiers would defeat the
erasure. Anonymizing satisfies both.
Analytics and crash reporting
Firebase Analytics records which screens are opened and which features are used — aggregate usage, so we know what is worth improving. Firebase Crashlytics records crashes and errors: the stack trace, device model, OS version, app version and configuration, and the time it happened.
Neither is linked to your PSN identity. These are switched on for all versions and are used only to keep the app working.
Advertising free versions only
The free versions are supported by Google AdMob. AdMob may use your device's advertising ID, your IP address (from which it derives approximate location) and ad interaction data to select and measure ads. That data is handled by Google under its own policies — we do not receive it and we do not build profiles of you.
Consent, if you are in Europe or the UK
If you are in the EEA, the UK or Switzerland, the app asks for your consent before any ad loads and before the ads SDK starts. The dialog is provided by Google's certified consent platform (the User Messaging Platform) and lists the advertising partners involved; nothing is requested until you answer it.
You can change that answer whenever you like, in Settings → About → Privacy options. That row also shows what you chose last time, and re-opens the same dialog so you can grant or withdraw consent per purpose.
Refusing does not remove ads — it makes them non-personalised: contextual ads chosen without profiling you. Your decision is stored on your device in the industry-standard format the consent platform publishes, and is passed to Google with each ad request so it is honoured.
Outside those regions no consent dialog is shown, and the row above does not appear.
Wherever you are, you can reset or delete your advertising ID, and turn off ad personalisation, in Android Settings → Privacy → Ads. Doing so does not remove ads; it makes them less targeted.
The paid version contains no ads: the ads SDK is not even included in the app, no ad request is made, no advertising ID is used, and no consent dialog is ever shown.
Purchases
The paid version and any in-app subscription are sold and processed entirely by Google Play Billing. Payment details, billing address and purchase history go to Google, never to us — we only learn whether an entitlement is currently active. Manage or cancel subscriptions in the Play Store.
AI-generated content
The app shows AI-written summaries of the community's game reviews. These are generated on our backend by Google Gemini, from the review text and star ratings for that game. Author identifiers are not included in what is sent, and the summaries are produced per game, not per person. Your own reviews are not used to build a profile of you.
Notifications and background activity
With your permission, the app sends notifications about new trophies, messages, community activity, friend requests and price drops. Delivery uses Firebase Cloud Messaging, which needs the push registration described above.
To do this the app refreshes in the background and schedules alarms. You can turn notifications off entirely in the app's settings or in Android's notification settings; the push registration for that device is removed when you sign out or erase your data.
Links, previews and embedded content
When you paste a link into a community message, the app fetches that page's public preview information (title, description, preview image) so the message shows a card. The preview image is copied to our storage so it stays available. Opening a link takes you to a third-party site that has its own privacy policy and is outside our control.
Searching for a GIF sends your search term to Giphy, which handles it under its own privacy policy. Game artwork, avatars and trophy icons are loaded directly from Sony's servers.
Third-party services
| Service | Role |
|---|---|
| Sony / PlayStation Network | Sign-in, trophies, games, friends, messages — privacy policy |
| Google Firebase | Database, storage, functions, messaging, remote config, App Check — privacy & security |
| Google Analytics for Firebase | Usage analytics |
| Firebase Crashlytics | Crash and error diagnostics |
| Google AdMob free versions | Advertising — how AdMob uses data |
| Google User Messaging Platform free versions | The advertising-consent dialog and the record of your choice |
| Google Play services & Play Billing | Platform services, integrity checks, purchases — privacy policy |
| Google Gemini | AI review summaries |
| Giphy | GIF search and picker — privacy policy |
| Cloudflare | Serves and caches our web content |
| Discord | Private channel where moderation reports are delivered to the moderation team |
Why we are allowed to hold this (legal bases)
If you are in the EEA or the UK, our legal bases under the GDPR are:
- Performance of a contract — the identifiers, posts, reviews, favourites, alarms and push registrations needed to give you the features you asked for.
- Legitimate interests — crash diagnostics and aggregate analytics to keep the app working, moderation records to keep communities usable, and integrity checks to stop abuse of our backend.
- Consent — advertising and the device identifiers it relies on (free versions, asked for before any ad loads), notifications, and any image you choose to upload. You can withdraw any of these at any time: advertising in Settings → About → Privacy options, notifications in the app's or Android's settings.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or object to a use. Write to [email protected] — we answer within 30 days. If you are in the EEA or UK you may also complain to your national data protection authority.
We do not sell personal information, and we do not share it for cross-context behavioural advertising beyond the AdMob processing described above.
Deleting your data
Settings → Account → Delete my data, inside the app. Two confirmations, then everything listed above is removed from our servers and the app signs you out. Deletion is immediate — there is no grace period and nothing is archived, though routine infrastructure backups may hold copies for up to 30 days before rotating out.
If you have already uninstalled the app or cannot sign in, email us with the subject "Data deletion request" and your PSN online ID. Full details are on the delete your data page.
What deletion does not reach:
- Your PlayStation Network account and trophies — those belong to Sony. We only read them.
- Your Google Play purchase history — held by Google, never by us.
- Anonymous crash and analytics data, which is not linked to you and cannot be singled out.
- Moderation records, which are anonymized instead (see above).
- Your advertising-consent choice, which lives on your device rather than on our servers — change it in Settings → About → Privacy options, or remove it by uninstalling or clearing the app's storage.
Retention
Content you create is kept until you delete it or delete your data. Push registrations are removed when you sign out, delete your data, or when the device stops accepting notifications. Crash reports and analytics follow Google's own retention periods. Moderation records are kept for as long as they are useful for moderation, in anonymized form after an erasure request.
Security
All traffic — to Sony, to our backend, and to third parties — runs over HTTPS/TLS. Newer backend endpoints verify that requests come from a genuine, unmodified install of the app before doing anything. No system is perfectly secure, and we cannot guarantee absolute security, but we treat anything you entrust to us accordingly.
International transfers
Our backend runs on Google Cloud infrastructure, and data may be processed in the United States and other countries where Google operates. Google's transfer safeguards, including the European Commission's standard contractual clauses, apply to that processing.
Children
The app is not directed at children under 13 (or under 16 in countries where that is the applicable age), and we do not knowingly collect their personal information. If you believe a child has provided us with personal information, contact us and we will remove it.
Changes to this policy
We may update this policy as the app changes. The date at the top always reflects the current version, and material changes will be announced in the app. Continuing to use the app after an update means you accept the revised policy.
Contact
Questions, requests or complaints: [email protected].