The developer boundary
xForceNow is designed without a developer-operated backend for identity, analytics, diagnostics collection, credential relay, or stream proxying. As a result, the developer does not receive service credentials, passwords, account profiles, libraries, controller input, microphone audio, gameplay video, or local diagnostics through the app.
Connection map
| Destination | Purpose | Receives credentials? | xForceNow relay? |
|---|---|---|---|
| NVIDIA / GeForce NOW infrastructure | Authentication, catalog, allocation, signalling, media | Provider only | No |
| Microsoft / Xbox infrastructure | Authentication, catalog, cloud streaming, console Remote Play | Provider only | No |
| Sony / PlayStation infrastructure | Authentication, profile, trophies, cloud catalog, cloud streaming, Remote Play coordination | Provider only | No |
| Your own console | Local or remote console gameplay | Console session material | No |
| PrintedWaste community endpoints | Optional GeForce NOW region naming and public queue estimates | No service token intended | No |
| Public STUN infrastructure, when used | Network address discovery for away-from-home connectivity | No account credential | No |
| GitHub Pages | Hosts this documentation and PlayStation handoff guide | No | No |
Provider hostnames can change because providers control their infrastructure. This table describes purpose and trust boundary rather than promising an immutable domain list.
PlayStation Cloud handoff
Apple TV cannot provide a general-purpose web browser. The static guide lets a user open Sony’s authenticated pages on a phone without creating an xForceNow credential relay. Same-origin browser protections prevent this site from reading Sony’s page, and the user never enters the value into this site.
What the public repository proves
The repository contains the complete files served by this website: HTML, CSS, and JavaScript. It makes the lack of forms, analytics, credential storage, and relay code independently inspectable. The app source repository is private and is not linked or exposed by this site.
Transparency is not the same as claiming zero third-party processing. GitHub can log ordinary page requests; Sony can see a Sony sign-in; Microsoft can see an Xbox sign-in; NVIDIA can see a GeForce NOW session; Apple can process TestFlight and App Store activity.
Security limits and responsible use
- Confirm provider domains before entering a password.
- Never paste credentials into a GitHub issue or support message.
- Use only accounts, games, and consoles you own or are authorized to access.
- Provider APIs and availability may change independently of xForceNow.
- Local device compromise, malicious keyboards, modified builds, or compromised provider accounts are outside what this architecture can prevent.