Sync

Sync copies a profile to your workspace so another device, or another member, can run it. It is off until you turn it on, and it is turned on one profile at a time. Everything else stays on your computer.

Sync is included on the 10-, 50-, 200- and 1,000-profile plans. On the Free plan the Sync screen says “Sync is not included in this workspace’s plan.” See Accounts and plans.

What is uploaded

A synced profile is packed into a bundle and encrypted on your computer before anything is sent. The bundle holds the profile’s settings, its browser identity, its proxy including the password, its cookies, its managed extensions and their content, and the site storage under Local Storage and extension settings. Site databases (IndexedDB) are included only if you switch them on for that profile.

It does not hold Chromium’s own cookie, login or form databases, caches, session storage, logs, crash data, downloads or any path from your computer.

The service never receives the encryption key, so it cannot read profile contents, cookies or proxy credentials. It does see the metadata it needs to run the service: your workspace, members, roles, invitations, transfers, folder and profile names, object sizes, revision numbers and access times. Sync does not make that metadata private. See What leaves your computer.

Workspace keys

One key protects the whole workspace. Folders are permission boundaries on the service, not separate key domains.

• Set up sync — the owner creates the key on their own device the first time. Do this before enabling sync for a profile.
• Confirm — a new device starts as Needs access. An owner or manager who already holds the key seals a copy for that exact device (Give access under Sync → Access), and the new device then chooses Confirm. Only once every copy is confirmed is the device Ready and able to download, run or upload a synced profile.
• Recover — recovery uses a 52-character code shown once, in the desktop app, when the key is created. It is never sent to Ant0 and is never written to logs. Keep it somewhere safe: with the recovery file and code an owner can restore access to a workspace no device can open.
• Lock removes the workspace key from this computer until you recover or sign in again.

Recovery codes and file paths never appear in the app’s web content; those steps run in the native window.

Turning sync on for a profile

The Sync screen has four tabs: Profiles, Conflicts, Transfers and Access.

Every action that reads or writes a profile’s data needs that profile stopped. If it is running, the app says “Stop the local profile before changing sync.”

Action	What it does
Enable sync	Creates a workspace copy of this stopped local profile. Choose the workspace folder, and whether to include site databases.
Upload changes	Uploads the stopped profile, encrypted. When it finishes, it becomes the latest version.
Get latest	Replaces the copy on this computer with the latest version. Your own changes are never overwritten; upload or resolve them first.
Download a copy	Creates a profile on this computer from a workspace profile it doesn’t have yet. It never replaces an existing profile.
Disable sync	Stops syncing this profile.

Include site databases is off by default and stays off when you enable sync. Turn it on only if the sites in that profile need their databases on other devices.

Disable sync asks what to do with the workspace copy: Keep it removes only the link from this computer, and Delete it deletes the copy permanently.

The Sync state column says where each profile stands: Current, Local changes, Uploading, Downloading, Offline, Conflict, Needs access, Locked, Error, Workspace only (not on this device), Other workspace or Local only.

Conflicts

The workspace keeps one current revision per profile. An upload that is no longer based on that revision is refused, and the local copy is preserved as a conflict rather than being overwritten. Conflicts also appear when a profile was changed offline, when a session lease was lost, or when a migration found the profile running.

Open Conflicts and choose Resolve conflict:

• Keep my changes — apply your changes to the latest version from the workspace.
• Keep both profiles — publish your local copy as a separate profile.
• Delete my copy — throw your copy away and keep the workspace version.

Transfers

Transfers moves a synced profile to another workspace. Choose Start transfer on a stopped, up-to-date synced profile and name the destination workspace and profile. In the destination workspace, Accept transfer creates the profile there and permanently removes it from the source. Stop transfer cancels it and leaves the source untouched. Starters cannot start a transfer.

A transfer has 30 minutes to finish uploading and then 24 hours to be accepted before it expires. One transfer can be open per profile, and 32 per workspace.

One person at a time

A synced profile can only run in one place. Before launching it, Ant0 downloads the current revision and takes a lease on it; if another member already holds that lease, the launch is refused and the app names the member and device holding it. The lease is renewed while the profile runs and released when it stops.

Working offline

Sync needs the network; running a profile does not. If a push cannot reach the service, the encrypted revision is kept in a local queue and retried, and the profile shows Offline. When the connection returns, Ant0 fetches the current workspace revision first and then applies the queued work, or raises a conflict if it no longer fits. A queued upload never skips the plan, membership, key or revision checks.

If the service cannot be reached at all when you launch a synced profile, Ant0 does not touch the workspace copy. It duplicates the stopped local copy as <name> (offline conflict) and runs that instead. That copy cannot upload or be shared until you reconnect and resolve it under Conflicts.

The app pulls the current revision before every launch of a synced profile, and refreshes sync status when you sign in, when the app starts, when you change workspace, and every minute while online.

Limits

• One encrypted profile revision is at most 200,000,000 bytes. A profile that exceeds it reports “This profile’s data exceeds the sync size limit.”
• Each workspace has a fair-use storage allowance. Reaching it reports “This profile reached its sync storage limit”; remove synced data and try again.
• One upload at a time per profile.
• One transfer at a time per profile, 32 open per workspace.

When a plan lapses

A lapsed workspace becomes read-only: “You can download and recover, but not upload, resolve conflicts or transfer.” The owner can download and decrypt the current versions for six months from the day service lapsed. Paying within that window restores normal sync. See Team.