What Together collects, and why

You can explore without signing up or giving us your name. With Live now location sharing on, other people see an unnamed dot at a broad place. If you allow community chat, you get an anonymous visitor name and a temporary cookie; you may choose a different temporary name. Neither requires an account. You can choose to show a name on Live now after confirming you are an adult, or sign up as an adult and verify your email for pen pals. We do not independently check your identity or age.

Anonymous to other people does not mean the site uses no data. The sections below explain the broad location, cookies and browser storage used before and after sign-up. Read how to stay safe and report a problem.

When you open the live map with location sharing on, you appear as an unnamed dot at your nearest city of 100,000 people or more, or at your country. Our network provider, Cloudflare, works out that approximate location from your IP address. We snap it to the nearest large city so it can never point to a street or a small town.

We never store or show your IP address. While your dot is live, it can also show the last few pairs of large cities or countries you explored, so somebody can open a connection or follow along. This short trail sits only in the same temporary Live now entry as your dot. Your dot and trail disappear within a minute of you closing the page, and neither becomes a saved history. Location sharing is on unless you turn it off below.

If you press “Find me”, your browser asks whether to share your location. If you agree, your device turns it into the nearest city of 100,000 people or more, or your country, straight away. Your exact location is never sent to us, stored or shown, and we never ask for it unless you press the button.

Your name only appears if you choose to appear with one, and that is for adults only. This device remembers your name, broad place, adult confirmation and choice to appear on return while Live now location sharing is on. Leave turns automatic return off; leave and forget also clears the saved name and place.

Only if you accept analytics, Google Analytics counts public page views, successful sign-ins, confirmed sign-ups and shares. These events carry no name, email, account ID, search text, chat text, place pair, invite code or password link. Microsoft Clarity can show recordings of how pages are used; the Live now, chat and account panels are masked. Both providers receive information about your device and visit, including your IP address, and may set analytics cookies such as _ga, _clck and _clsk.

We do not use analytics for advertising, we have turned off Google's advertising features, and we never use it to decide who you are introduced to. Neither tool loads before you agree. You can withdraw consent here at any time; Together then clears the analytics cookies it can access and reloads without either tool. Your browser or the providers may keep data already sent under their own retention rules.

The private admin panel uses first-party aggregate counts of live dots, recent sign-ups, public-room activity and reports. A three-hour operational summary goes to our Ace Media Discord channel through Ace Bot. It contains counts only: no names, locations, message text or report details. These operational counts come from Together's existing records and do not require an analytics cookie. If you accept analytics, Together also keeps hourly totals of page views, sign-ins, confirmed sign-ups and shares for up to 30 days. Those totals contain no visitor identifiers and help show opt-in site activity in the Discord summary.

The facts about places come from open data that we copy onto our own server. When you open a place, its Wikipedia introduction and photograph are fetched by our server, not your browser, so Wikipedia and Wikimedia Commons never see your visit. The weather right now is fetched the same way, from MET Norway, for the centre of the city or country only.

If you share a comparison, the link contains only the two places you chose to compare. It says nothing about you.

Members give an email address, a password, a first name or nickname and, if they like, a place, a line about themselves, the languages they would write in, a map picture and a face photo. The email is stored encrypted and used for signing in, confirming an account and password recovery. Passwords are stored only as a one-way scramble.

Letters and chat messages are stored encrypted. Pen-pal chats are seen only by the two pen pals; place and country-to-country bridge rooms are seen by the visitors and members who chose to join them. Active public rooms can appear on the map with an aggregate number of recently active people. A bridge names two chosen countries, not where its participants live or what they believe. Activity from people who chose those places can make the arc more prominent, without marking individual messages by location. Moving dots can show that somebody is typing, but never who they are or what they are typing; the typing signal expires after a few seconds. If a message is reported, I can see a sealed copy in the moderation queue. Chat messages are screened for serious safety risks before delivery. Only pen-pal chats may try a direct browser connection, which may tell the other pen pal's device your network address while both of you have the chat open. Messages are still saved and screened by Together first, and the server remains the fallback.

Regional and bridge chat messages disappear after seven days. Pen-pal conversations remain until either pen pal deletes the conversation for both people. Letters are deleted 30 days after a pen-pal connection ends; waves expire after 14 days; resolved reports are deleted after 90 days. Pictures are re-made on our server, which strips hidden data such as GPS location. Map pictures are public; face photos are shown only to pen pals.

Allowing community chat sets a secure cookie containing a random visitor token for up to 30 days. The database holds only a one-way hash of that token, an automatic anonymous name or the temporary name you choose, your coarse city or country, and the public rooms you joined. Temporary names cannot copy an existing member name. Turning community chat off removes the visitor identity and its room memberships; public room messages still disappear on their normal seven-day schedule.

Signing in sets a separate cookie that keeps you signed in, for up to 30 days of not visiting. It records which browser and device type you use, so you can recognise your sessions, but never your IP address. You can download everything or delete your account at any time from Your data in your account.

Public maps, town records, boundaries and reference facts are saved on this device for offline study as you explore. Facts are checked again after 30 days and boundaries after seven days when online. Expired copies remain available offline and after a failed refresh, with their cache dates shown. The study cache is limited to 64 MB; older material may be replaced when online. The offline app and basic terrain are saved separately. Chats, account details, live visitors and compared place pairs are not stored in this study cache.

Someone else using this browser could inspect the public places it has saved. Use “Clear saved study data” in the Offline study panel to remove them, or clear this site's storage in your browser to remove the offline app too. Browsers may reclaim storage themselves, so this is not a permanent archive.

Your privacy choices, and your Live now name, broad place, adult confirmation and return choice, are kept in your own browser's storage. Leave turns automatic return off without removing your name and place. “Leave and forget me” removes them.

The map layers and optional sounds you switch on or off are kept in the same storage. Sounds are off until you turn them on, and the sound setting is not sent to us. Your choice of light or dark and palette is kept in one small cookie, so the page opens in your colours; it holds nothing else and is never used to track you.

You can ask what we hold about you, or ask us to delete it, by emailing [email protected]. You can also complain to the Information Commissioner's Office at ico.org.uk.