Privacy Policy

PS Trophies for iPhone — last updated 25 October 2026

PS Trophies is an independent PlayStation Network companion app built by Indiesoftware. It shows your trophies, games, friends and messages, and adds communities, reviews, deals and widgets on top.

This policy covers the iPhone app and the web pages and backend services behind it. PS Trophies also exists for Android, with its own privacy policy; this one says nothing about that version and that one says nothing about this.

The short version

We never see your PlayStation Network password. Sign-in happens on Sony's own page.
Your trophies, games, friends and PSN messages are fetched from Sony straight to your device and cached there. They are not copied to our servers.
What we do store is what you deliberately create: community posts, reviews, feedback, favourites, price alarms and your block list — plus the identifiers needed to attach them to you.
If you buy the unlock or leave a tip, Apple takes the payment and keeps the record. We never see your card or your billing address, and we keep no record of your purchases on our servers.
We do not sell your data. There are no ads in the app: it contains no advertising SDK, makes no ad request, never reads your advertising identifier, and never asks for permission to track you across other companies' apps and websites.
Our web pages set no cookies at all. Some of them count visits, but nothing is stored in your browser and nothing follows you between pages — and this policy and the child safety page are not counted at all.
You can erase everything we hold, from inside the app, at any time.

Who is responsible

The data controller is Indiesoftware. For anything in this policy, contact [email protected].

PS Trophies is not affiliated with, endorsed by or sponsored by Sony Interactive Entertainment. "PlayStation" and "PSN" are trademarks of their respective owners.

Signing in with PlayStation Network

To show your data, the app needs you to sign in to PSN. That sign-in is Sony's own login page, shown inside the app. We never receive, see or store your PSN password or your Sony account credentials.

What comes back is an access token. It is kept in the iOS Keychain on your device only and is used to call Sony's APIs directly from your phone. It is never sent to our backend. The Keychain entry is marked as belonging to this device alone, so a backup or device transfer does not carry it to a new phone — you sign in again there. Signing out removes it.

Sony's sign-in page also leaves its own session cookies in the app's web storage, on your device. The app uses them for one thing only: to obtain Sony's permission to change your PSN profile (your picture and your About Me), so you are not asked to sign in a second time. They are never sent to us.

Your use of PlayStation Network is governed by Sony's own privacy policy, not this one.

Data that stays on your device

Most of what the app shows you never leaves your phone. It is stored in an on-device database and in the app's preferences so the app works quickly and offline:

Your PSN profile, trophies, trophy progress, games and play time
Your friends list and the profiles of players you look at
Your PSN messages and conversations, including media you receive
App settings, theme, filters, sort order, language and notification preferences
Your hearts and stars: favourite games, trophies and communities you marked
The on-device copy of your block list, which is also kept on our servers (see below)
Downloaded images and game artwork (image cache)
The data your Home Screen widgets show, which the app writes to a storage area it shares only with its own widgets and share extension

Apart from the block list, which is stored on our servers as described below, none of this is transmitted to us. Deleting the app removes it, and signing out removes what belongs to your account.

Two things iOS does that the app does not control. The app's database and preferences are part of an iCloud or computer backup of your device, if you make one, and come back with a restore — this is Apple's backup, not ours, and we never receive it. And the Keychain is not emptied when an app is deleted: the sign-in token stays on the device until the app is installed again, and the app deletes it the first time it opens, so a reinstall starts signed out. To remove it without reinstalling, sign out in the app before you delete it.

Data we store on our servers

Our backend runs on Google Firebase (Firestore, Realtime Database, Cloud Storage, Cloud Functions). The app signs in to Firebase anonymously — that anonymous identity is not a real account and holds no personal details of its own.

Here is everything we hold, and why:

What	Why
PSN account ID and online ID	To attach the items below to you, and to address notifications to your devices
Community posts and chat messages	To deliver them to the communities you post in. Includes text, reactions, stickers (a reference to a sticker image), GIFs (a reference to an image on GIPHY) and link previews
Images you attach	Message attachments, community group images and your profile background. Uploaded only when you pick them or take them
Communities you create	The community's name, description, tags, invite-only setting and image, and the lists of its members and join requests, which hold their PSN online IDs — including yours, in the lists of the communities you join or ask to join
Game reviews	Your star rating and review text, shown publicly next to the game
Feedback	The subject and message you send us
Favourites	The players you marked as favourites, so the list follows you across devices
Wishlist price alarms	The games you want to be told about when the price drops
Block list	The PSN account IDs of the users you blocked, so that their content stays hidden on every device you sign in on. No names are stored, and a user you block is not told
Push registrations	A push identifier (your Firebase installation ID), a device identifier (Apple's identifier for vendor, `identifierForVendor`), the app version and a timestamp, stored beside your PSN account ID and online ID — one record per device you signed in on
Deals subscription	Whether you asked to be notified about store deals
Community presence	A short-lived "online in this community" flag and a "typing" signal, so members can see who is around
Moderation records	Reports you file — about a message, a review, a community or a player — and reports filed about you, with a copy of the reported content. Also, if a moderator has withdrawn your access to community posting, a record of that against your PSN online ID

The device identifier is a random value Apple gives every app from the same developer on your device. It is not your advertising identifier, and we use it for one thing: telling your own devices apart so a notification reaches each one once. It is stored beside your PSN account ID, so we treat it as linked to you. (Firebase Analytics separately uses its own installation identifier, and may read this same vendor identifier; see Analytics below. Neither is joined to your PSN account.)

Feedback and reports also carry the app's version, the fact that they were sent from the iPhone app, and — so a moderator can tell a supporter from a free user — whether you own the unlock. They carry no purchase record: no amount, no date, no order number.

What is deliberately not there

No email address. The app never asks for one and never stores one.
No real name. Your PSN display name is rendered on your device only.
No passwords. See the PSN sign-in section above.
No payment details and no purchase history. No card number, no billing address, nothing that could be used to charge you. Apple handles every payment and we never see any of it. Unlike some other apps, we do not keep a copy of your purchases either — see Purchases below.
No location. The app does not ask for your location and has no way to read it. Pictures are cleaned of the location and camera details some photos carry inside them before they are uploaded. A file the app cannot read or rewrite — an animated WebP, or something that is not a picture it can decode, picked or shared in from another app — is sent as it was.
No contacts, calendar, health data or call logs. The app requests no permission for any of them.
No audio recording. Voice messages are hosted by Sony and played, never recorded.
No broad photo access. Pictures are chosen through the system photo picker, which hands the app only the pictures you tap, or taken with the camera when you choose to. The app never asks to read your photo library as a whole. The only library permission it asks for is the add-only one, used when you save a screenshot or clip from your PlayStation captures to your Photos.

What other people can see

PS Trophies is partly a social app. When you take part in it, other users can see your PSN online ID and avatar, the community messages and reactions you post, the game reviews you write, images you attach to messages, your profile background, and whether you are currently active in a community.

Community posts and reviews are visible to other users of the app and are not private messages. Treat anything you post there as public.

Community content, blocking and moderation

Community content is not reviewed before it is published. Anyone can report a message, a review, a community or a player from the app; reports reach our moderation tools and a private moderator channel, and a moderator can delete the message. Deleting a message also removes its stored image attachment.

You can block a player from their profile. A block is enforced on your own device, from your own list: their messages and reviews are hidden from you, and they are not told. Your list is stored on our servers as account numbers only, so it follows you to your other devices; nothing else about the people on it is kept.

Our community guidelines set out what is allowed.

When you erase your data, moderation records are anonymized rather than deleted: the identifiers are replaced with [deleted] and the record itself is kept. Deleting them outright would let abuse history be erased on demand; keeping the identifiers would defeat the erasure. Anonymizing satisfies both.

One record is not anonymized, and it is the exception worth stating plainly: if a moderator has withdrawn your access to community posting, that record is kept against your PSN online ID and survives an erasure request. Anonymizing it would let a withdrawal be cleared on demand, and the same person would simply return.

Analytics and crash reporting

Firebase Analytics records which screens are opened and which features are used — aggregate usage, so we know what is worth improving. It identifies an installation of the app with an app instance ID that Firebase generates, which you can reset by reinstalling. Firebase Crashlytics records crashes and errors: the stack trace, device model, OS version, app version and configuration, and the time it happened.

Neither is linked to your PSN identity: the app never gives either of them your account ID, your online ID or the content of your messages. Neither uses your advertising identifier — the app does not include the part of Firebase that could read it. They are on for everyone and are used only to keep the app working.

This website

Some of our web pages — the home page, the FAQ, the release notes, the community guidelines and the data deletion page — use Google Analytics to count visits, in a cookieless configuration.

No cookies are set and no identifier is stored in your browser, so there is nothing to consent to and no banner to dismiss. What is recorded is the page you opened, the approximate region it was opened from, the page that linked you here, and the browser and device type. Visits cannot be tied together into a profile, and cannot be tied to you or to your PSN account.

This page and the child safety standards page are exempt. They carry no analytics of any kind — no counting, no measurement, nothing. Reading a privacy policy, or looking up how to report the abuse of a child, is not something we record.

Tracking and advertising

The iPhone app contains no advertising of any kind, whether or not you have paid. It has no advertising SDK, makes no ad request, does not read your advertising identifier, and does not track you across other companies' apps or websites, so it never shows the system tracking prompt. We do not share your data with data brokers or advertisers.

Purchases

The one-time unlock and the tips are sold and processed entirely by Apple, through the App Store. Your payment details and billing address go to Apple and never to us — we never see a card number and we cannot charge you. The app is not a subscription: the unlock is bought once and kept, and a tip unlocks nothing.

We keep no record of your purchases. What you own is decided on your device, from Apple's own record of your purchases — which is why Restore purchases works on a new phone with no help from us. Apple is the seller and keeps its own record; it is subject to Apple's privacy policy and outside our control. Refunds and receipts are handled by Apple, at reportaproblem.apple.com.

AI-generated content

The app shows AI-written summaries of the community's game reviews. These are generated on our backend by Google Gemini, from the review text and star ratings for that game. Author identifiers are not included in what is sent, and the summaries are produced per game, not per person. Your own reviews are not used to build a profile of you.

Notifications and background activity

With your permission, the app shows notifications about new trophies, messages, community activity, friend requests and price drops. Delivery uses Apple's Push Notification service and Firebase Cloud Messaging, which need the push registration described above.

The app also asks iOS to wake it now and then to refresh your data in the background, and it receives a silent, once-an-hour wake-up from our backend for the same purpose. The wake-up is addressed to everyone signed in at once, not to you, and contains no content about you. The push registration is made even if you have not allowed notifications, because a silent wake-up is not a notification; refusing notifications stops them being shown, not the registration. To stop all of it, sign out or erase your data.

You can switch each kind of notification off in the app, and all of them in your device's Settings → Notifications → PS Trophies. You can turn Background App Refresh off in Settings → General → Background App Refresh. The push registration for the device is removed when you sign out or erase your data.

Links, previews and embedded content

When you paste a link into a community message, the app fetches that page's public preview information (title, description, preview image) so the message shows a card. The preview image is copied to our storage so it stays available. Opening a link takes you to a third-party site that has its own privacy policy and is outside our control.

In a community you can search GIPHY for a GIF or a sticker, from the GIF picker or by typing /gif or /sticker and a search. What you search for, and your device's language, are sent to GIPHY, which handles them under its own privacy policy; nothing that identifies you is sent with them. The GIFs in the picker and in messages are loaded from GIPHY's servers, and a GIF you send is stored in the message as a link to GIPHY's copy.

Game artwork, avatars and trophy icons are loaded directly from Sony's servers. Files the app reads from our own storage are served through Cloudflare.

Home Screen widgets and the share sheet

The app's widgets show trophies, friends and messages already held on your device. To draw an avatar or a trophy icon a widget downloads it from Sony's servers, the way the app does, and the trophies widget can also download a profile background (the one belonging to the account it shows) from our storage (through Cloudflare); each is kept as a copy on your device, and widgets send nothing to us. The app's entry in the iOS share sheet copies the picture, link or text you share to a storage area on your device; nothing leaves your device until you choose a community and send it.

Third-party services

Service	Role
Sony / PlayStation Network	Sign-in, trophies, games, friends, messages — privacy policy
Google Firebase	Database, storage, functions, messaging, remote config, App Check — privacy & security
Google Analytics for Firebase	Usage analytics
Google Analytics website only	Visit counts on some of our web pages, cookieless — not on this page or the child safety page
Firebase Crashlytics	Crash and error diagnostics
Apple	Purchases and tips (the App Store), push delivery (Apple Push Notification service), and checks that requests come from a genuine copy of the app (App Attest and DeviceCheck) — privacy policy
GIPHY	GIF and sticker search in communities — privacy policy
Google Gemini	AI review summaries
Cloudflare	Serves and caches our web content and the files the app reads from our storage
Discord	Private channel where moderation reports are delivered to the moderation team

Why we are allowed to hold this (legal bases)

If you are in the EEA or the UK, our legal bases under the GDPR are:

Performance of a contract — the identifiers, posts, reviews, favourites, alarms, block list and push registrations needed to give you the features you asked for.
Legitimate interests — crash diagnostics and aggregate analytics to keep the app working, moderation records to keep communities usable, and integrity checks to stop abuse of our backend.
Consent — notifications, and any image you choose to upload or take. You can withdraw either at any time: notifications in the app or in your device's Settings; images by deleting what you posted or erasing your data. There is no advertising in the app and so no advertising consent.

Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or object to a use. Write to [email protected] — we answer within 30 days. If you are in the EEA or UK you may also complain to your national data protection authority.

We do not sell personal information, and we do not share it for advertising.

Deleting your data

Settings → Account → Delete my data, inside the app. Two confirmations, then everything listed above is removed from our servers and the app signs you out. Deletion is immediate — there is no grace period and nothing is archived, though routine infrastructure backups may hold copies for up to 30 days before rotating out.

If you have already deleted the app or cannot sign in, email us with the subject "Data deletion request" and your PSN online ID. Full details are on the delete your data page.

Communities you created. A community nobody else joined is deleted with the rest of your data. One that other members did join is not — that would delete their messages and their space because of your decision. It loses its owner instead: your name is replaced with [deleted] and the community is closed, so nobody can post, react or ask to join. With no new messages possible it drops out of the app after 30 days, and is then deleted outright. Your own messages in it are removed either way, and your name comes off the member list of every community you had joined.

What deletion does not reach:

Your PlayStation Network account and trophies — those belong to Sony. We only read them.
Your purchases at Apple. Apple is the seller and keeps its own record of everything you have bought; that is outside our control. We hold no record of them to delete.
Anonymous crash and analytics data, which is not linked to you and cannot be singled out.
Moderation records, which are anonymized instead (see above).
A withdrawal of your access to community posting, if a moderator has applied one. That record is kept against your PSN online ID, and unlike the rest of the moderation records it is not anonymized — see above.
Content of yours that is embedded in someone else's post — a quote of your message, or a message you pinned in a community. The quoted text and image are removed and your name is replaced with [deleted], but the other person's post stays.
A community you created that other members joined — closed and anonymized rather than deleted, then removed after 30 days (see above).
Your PSN account ID in the block list of a user who blocked you. A block belongs to the person who made it: if erasing your data removed it, a blocked account could undo the block by erasing its data and signing in again. What is kept is the number alone, with no name, in a list only that user's app reads. Your own block list is deleted.
Your name where someone else typed it into their own message (an @-mention). That is their text, so it stays until their message is removed: community messages are deleted 30 days after they are posted, unless the community pinned them. Ask us by email if you want it gone sooner.
What is on your own device: the app's data (delete the app, or sign out) and anything in an iCloud or computer backup you made (delete the backup in iOS Settings).

Retention

Community messages are removed automatically about 30 days after they are posted; they cannot be deleted individually, though a moderator can remove one sooner and erasing your data removes them all at once. Everything else you create is kept until you delete it (a review, a favourite, a price alarm or a block can each be removed one at a time in the app) or erase your data. A community left ownerless by an erasure request is deleted 30 days after its last message. Push registrations are removed when you sign out, delete your data, or when the device stops accepting notifications. Crash reports and analytics follow Google's own retention periods. Moderation records are kept for as long as they are useful for moderation, in anonymized form after an erasure request — except a withdrawal of community posting access, which keeps your PSN online ID for as long as the withdrawal stands.

Security

All traffic — to Sony, to our backend, and to third parties — runs over HTTPS/TLS. Newer backend endpoints verify that requests come from a genuine, unmodified install of the app, using Apple's App Attest, before doing anything. No system is perfectly secure, and we cannot guarantee absolute security, but we treat anything you entrust to us accordingly.

International transfers

Our backend runs on Google Cloud infrastructure, and data may be processed in the United States and other countries where Google operates. Google's transfer safeguards, including the European Commission's standard contractual clauses, apply to that processing.

Children

The app is not directed at children under 13 (or under 16 in countries where that is the applicable age), and we do not knowingly collect their personal information. If you believe a child has provided us with personal information, contact us and we will remove it.

Changes to this policy

We may update this policy as the app changes. The date at the top always reflects the current version, and material changes will be announced in the app. Continuing to use the app after an update means you accept the revised policy.

Contact

Questions, requests or complaints: [email protected].