XYVR is an address book application that lets you search through your VRChat, Resonite, and ChilloutVR contacts.

Once data is retrieved, it is stored offline, no Internet connection needed. The address book remains fully functional even if access to the original account is lost for any reason.

If you have multiple accounts on different social VR platforms (or even on the same platform), you can view your contacts as one single address book.

If you are a user looking to use this software: Sorry, but this application is currently under development. This section will become available once this application goes out of Alpha.

Please check back at another time.

• 📘 Open documentation

If you are a developer, feel free to read below.

XYVR stores all data on your computer.

• This application does not store your email and password.
• We store a cookie file and session tokens upon login, if requested.
• We store your address book in the %APPDATA%/XYVR/ folder.

XYVR does not operate any server, and it does not have analytics. The only services are those of the social VR apps.

• We only perform requests to the following URLs:
  • for VRChat accounts: https://api.vrchat.cloud/api/1 (live updates: wss://pipeline.vrchat.cloud/)
  • for Resonite accounts: https://api.resonite.com/ (live updates: https://api.resonite.com/hub)
  • for ChilloutVR accounts: https://api.chilloutvr.net/1 (live updates: wss://api.chilloutvr.net/1/users/ws)
  • Information from one account is never transmitted to the service of another account (e.g., Resonite account data is never transmitted to VRChat servers, etc.)
• We fetch thumbnails:
  • for VRChat: from any thumbnail URL provided by the VRChat API.
  • for Resonite: only from URLs which hostname is resonite.com, or any subdomain of resonite.com.
  • for ChilloutVR: from any thumbnail URL provided by the ChilloutVR API.
• There are no requests to any other server.
• There is no telemetry, no analytics, and no cloud storage.

XYVR is only interested in building an address book and monitoring live sessions.

• This application does not modify, add, or remove any data from your VRChat, Resonite, or ChilloutVR accounts.
• The following requests are for building an address book:
  • Get all of your friends' usernames, bio, links, notes.
  • Get all notes. If someone who has a note is not a friend, then get their username, bio, links, notes.
• The following requests are for live monitoring:
  • Receive live events regarding user status changes and user sessions.
  • Get the currently active sessions.
  • Get the session of a contact.
  • Get the world of a session and its thumbnail.

For more details regarding privacy and data considerations, please refer to the following page:

📘 Privacy and data considerations

If you are a developer looking to modify or audit this software, the developer documentation can be found in the README-DEVELOPER.md file, and README-SECURITY.md can help you conduct an audit.

The communication with the APIs is a custom implementation, with the requests based on the following reference documents:

• The API page on the official Resonite wiki.
• The community-maintained VRChat API documentation at vrchat.community maintained by github.com/vrchatapi.
• Due to the absence of documentation, the CVRX app (MIT License) maintained by github.com/AstroDogeDX was used as a reference for the API endpoints.