Stuff I've made

Why the store lists these data types

The store lists every data type any feature can touch. Without signing in, your watch history stays on your device and only the anonymous stats and error reports described below leave it. The rest applies only if you turn on Drive backup or join VidMatch:

Website content, web history, user activity

The YouTube videos you watch and for how long, read from YouTube pages on your device. No other site is read, and your browser history is never touched.

Personally identifiable information

Your Google name, email and photo once you sign in, kept on your device for Drive backup and sent to the extension's server only for VidMatch, along with your birthday and gender.

Authentication information

Google and Discord sign-in tokens, kept on your device and used only to sign you in to Google and Drive, and for VidMatch, the extension's own server.

Location

VidMatch only, and only if you choose to be matched with people near you.

Financial and payment information

The VidMatch subscription, paid on PayPal's own page. Card details never reach the extension or its server.

On Firefox, each of these is optional, and Firefox asks for your OK the first time you need it. Drive backup asks only for sign-in information, since your history goes to your own Drive. VidMatch asks for personal information, sign-in information, browsing activity, website content and location, since it saves a profile on the extension's server. If you say no, that feature stays off. If you later remove a permission in Firefox's add-on settings, the feature pauses until you allow it again. Error reports are sent only if you allow technical data.

Google sign-in

Name, email address and profile picture

Identifying your account. Signing in for Drive backup keeps them on your device only. Joining VidMatch creates an account on the extension's server holding these three.

Its own app-data folder in your Google Drive

Backing up your watch-time history (video IDs, channels, categories and when you watched). It sees no other Drive file, and the backups never pass through the extension's server. Asked only when you turn on backups.

Birthday

VidMatch only - verifying you're 18 or older and showing your age to matches.

Gender

VidMatch only - prefilling your gender for matching. You can change it.

This use adheres to the Google API Services User Data Policy, including its Limited Use requirements. Google user data is never used to train AI or machine-learning models.

VidMatch

VidMatch is off until you sign in for it and agree to its consent screen. Once on, it uses:

Your last 7 days of watching

Videos, channels, categories and when you watched them, minus anything you hid. This is sent to the extension's server and turned into interest tags; for videos with too few tags, the title, description and captions are sent to Anthropic's AI to create them. Only the tags, channel names, categories and a watch-minutes total are kept - not the videos, titles or captions.

Your matching preferences

Friendship or dating, who you want to see, age range and distance.

Your location

Optional. You either search for your city or share your current location, whose exact coordinates are sent to Google Maps only to find your city. Only city-level coordinates are kept, and other users see only your country and a distance rounded to about 1 km.

Your Discord account

Your Discord ID and username, to add you to the VidMatch server and open a private chat channel with each match. None of your VidMatch profile is sent to Discord.

Your activity

Likes, matches, blocks and reports.

People you're shown see your Google name and photo, age, gender, what you're looking for, shared interests, a short interest label, your country and approximate distance. Once you match, they also see when you were last online. Your email is never shown.

Service providers

Convex

The backend that stores your account and VidMatch data.

Firebase

VidMatch sign-in.

Anthropic, with Google Vertex AI as a backup

VidMatch interest tags, interest labels and match ordering. Ordering gets only ages, genders, distances and tags - no names, emails or IDs. They don't train on this data.

Google Maps

City search, finding your city and checking travel distance to matches.

PayPal

Payments. The backend receives your subscription status and PayPal email.

EZcount

Receipts, which need your name and email.

Resend

Emails, such as a reminder before your trial ends.

Discord

VidMatch chats.

YouTube

The extension loads video and channel details straight from YouTube, the same way the site does when you browse it.

Hugging Face

Only if you choose to download the optional on-device AI model. Nothing about you is sent.

Google Analytics

Anonymous usage stats, such as button clicks and your total watch time. No name, email or URL, so these stats can't identify you.

Sentry

Error reports: the error, the extension version, your browser and the type of YouTube page you were on - never which video or search, and no account details.

Data storage & protection

• Watch-time history and sign-in tokens live in your browser's extension storage. Drive backups live in your own Drive.
• All traffic is encrypted (HTTPS).
• To fight abuse, a salted hash of your IP address and your browser type is logged at sign-in and on VidMatch actions. You can object by email.

Data retention & deletion

Watch-time data

On your device until you uninstall the extension.

Drive backups

Until you remove them from the dashboard or revoke the extension's access.

VidMatch data

Until you delete it from the VidMatch screen. This also removes your Discord channels. It doesn't cancel your PayPal subscription - cancel that in PayPal.

Account details from older Drive-only sign-ins

Earlier versions created a server account for Drive backup too. Those details stay until you ask for deletion by email - signing out alone doesn't remove them. Drive backup no longer creates one.

Access logs

Deleted after 90 days.

Payment records and receipts

Kept up to 8 years, as tax law requires.

Bans and reports against you

Kept for safety; bans store only a hash, for 3 years.

You can revoke the extension's access anytime from your Google Account permissions. For any data or deletion request, email avi6106@gmail.com.