Privacy policy

Data used by YouTube Inbox

When you sign in, YouTube Inbox processes your Google account identifier, email address, display name, profile image, YouTube Inbox handle, friend relationships, shared YouTube video IDs and titles, optional notes, timestamps, and message read state.

Authentication access and refresh tokens are stored in browser extension storage so you remain signed in. The extension reads a video's public ID, title, URL, and thumbnail only when you choose to share that video. It does not monitor unrelated browsing.

How data is stored and transmitted

Profiles, friend relationships, shared videos, notes, and read state are transmitted over HTTPS to the YouTube Inbox Supabase project. Google processes authentication. Cached inbox data and authentication tokens remain in browser extension storage.

Supabase row-level security restricts messages and friendships to their participants. Exact email or handle lookup is performed by a protected database function and does not expose a public user directory.

Why data is used

Data is used only to authenticate users, find a friend they explicitly search for, manage friend requests, deliver shared YouTube videos, show unread state, and synchronize the inbox between browsers.

Sharing and limited use

Data is shared only with Google and Supabase as service providers and with the specific friends involved in a request or message. Personal data is not sold and is not used for advertising, creditworthiness, or unrelated purposes. YouTube Inbox contains no advertising, analytics, or tracking SDK.

The use of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Retention and deletion

Removing the extension clears its browser-local data but does not automatically delete remotely stored data. You may request deletion of your profile, friendships, messages, and associated remote data by emailing stickdeus@gmail.com from the Google account used with YouTube Inbox.

Contact

For privacy questions or deletion requests, email stickdeus@gmail.com.