1. Scope and data controller
This policy governs information collected, stored, or otherwise processed by the Video Notes browser extension for Chrome and Firefox.
The extension operates primarily within your browser to augment youtube.com/watch pages.
The optional Share and flashcards features rely on external services (see Section 5); all other functionality runs entirely on-device.
For the purpose of applicable privacy regulations, the data controller is Pramesh Bajracharya
(prameshbajra.github.io).
- Contact
-
Privacy inquiries can be submitted through the public issue tracker at
github.com/prameshbajra/video-notes/issues
or via the contact details listed on the website above.
2. Information processed by the extension
Video Notes is designed to function without gathering personal data or transmitting content away from the device.
The extension processes only the information required to save and surface your notes:
- The free-form text you enter into the Video Notes workspace.
- Timestamps associated with the active YouTube video in order to place markers on the timeline.
- The YouTube video identifier, title, and locally calculated note counts to organize entries.
- Drawing annotations, including editable scene data, a rendered PNG preview, and image and viewport dimensions.
When you use the optional Share feature, the extension transmits the following to the share API.
The currently published extension uses share-api.video-notes.workers.dev; the same service is also available at
api.videonotes.dev. A read-only page is then generated at share.videonotes.dev:
- The YouTube video identifier and title.
- Every note associated with that video, including timestamps and text.
- For notes with drawings, the rendered PNG image and image and viewport metadata. Editable drawing scene data is not sent.
No data is transmitted unless you explicitly click the Share button or enable the optional flashcards feature (see section 5).
The extension does not request or infer usernames, email addresses, browsing history, or analytics identifiers.
3. Storage location and retention
Your notes, drawing data, video metadata, and settings are stored on the device using the browser's local extension storage
under videoNotes:* keys. This storage is not browser-sync storage.
Local data persists until you delete it through the extension, clear the extension's browser storage, or uninstall the extension.
When you use Share, a copy of the video identifier, title, timestamped note text, and any rendered drawing images and metadata is stored in Cloudflare Workers KV for 90 days, then expires automatically.
Video Notes does not intentionally log note or drawing contents; Cloudflare may process routine request metadata and diagnostics needed to operate the service.
4. Browser permissions and their purpose
Video Notes requests the minimum set of permissions needed to operate:
- storage — allows the extension to store the notes, drawings, settings, and API key you choose to save in local extension storage.
- unlimitedStorage — prevents the browser's small default extension-storage quota from blocking larger local note and drawing collections.
- tabs — opens a saved video's timestamp in a tab and supports the optional new-tab flashcards page.
- host_permissions for
share-api.video-notes.workers.dev — allows the extension to send note and rendered drawing data to the share API when you explicitly click the Share button. No requests are made to this host unless you initiate a share action.
- host_permissions for
generativelanguage.googleapis.com — allows the optional flashcards feature to send your note text to Google's Gemini API to generate quiz questions, using an API key you provide. No requests are made to this host unless you enable flashcards and add your own key.
- content_scripts on
youtube.com — injects the inline workspace that renders the note editor, timeline, and controls on youtube.com/watch pages.
The annotation editor is packaged with the extension and exposed to YouTube pages so it can be loaded on demand; no executable code is downloaded remotely.
Video Notes does not use its permissions to read page content on non-YouTube sites or collect browsing history.
5. Network access, disclosures, and third parties
With the exception of the optional Share and flashcards features described below, the extension does not initiate outbound network requests.
No analytics or advertising SDKs are bundled with the codebase.
Video Notes does not sell or trade your information.
Share feature. When you click the Share button, the extension sends a request to
share-api.video-notes.workers.dev (also available as api.videonotes.dev), a Cloudflare Workers endpoint maintained by the developer.
The request contains the video identifier, video title, all timestamped note text for that video, and any rendered drawing PNGs and image and viewport metadata.
The API stores this data in Cloudflare Workers KV for 90 days to generate a unique, read-only shareable link.
Anyone with the link can view the shared data until it expires. Browsing history, cookies, device identifiers, and editable drawing scene data are not included in the request.
This feature is entirely opt-in — no network requests are made unless you explicitly initiate a share action.
Flashcards feature. Flashcards are off by default. If you enable them and provide your own Google Gemini API key, the extension sends your note text and the associated video titles directly from your browser to Google's Gemini API (generativelanguage.googleapis.com) to generate quiz questions. Your API key is stored only in local extension storage on your device and is never sent to the developer. This data is processed by Google under Google's own terms and privacy policy; note data is not sent to the developer's servers. No requests are made unless you have enabled flashcards and added a key.
6. Security measures
Outside the optional Share and flashcards features, data never leaves your browser. Security focuses on minimizing attack surface:
- The extension injects lightweight, auditable scripts based on open-source code published at github.com/prameshbajra/video-notes.
- All executable code, including the annotation editor loaded locally on demand, is bundled with the extension. No executable code is downloaded from or evaluated on remote servers.
- Patches are distributed through the Chrome Web Store and Firefox Add-ons update channels to ensure authenticity.
Users remain responsible for protecting their own devices with appropriate operating-system level safeguards.
7. User controls and data subject rights
You are fully in control of the content stored by Video Notes. Available controls include:
- Using the export option in the popup dashboard to download a JSON backup of all notes.
- Importing a trusted backup file to restore data on a different profile or machine.
- Deleting individual notes or clearing all data through the browser's extension controls or by uninstalling the extension.
For notes that have not been shared, the data resides solely with you and no server-side records exist.
Shared note data expires automatically after 90 days. Anyone with the link can view it until expiry, and the current extension does not provide an in-app revoke control.
To request earlier deletion of shared data, please open an issue on the
GitHub issue tracker.
8. Children's privacy
Video Notes is intended for general productivity use and is not directed at children under 13.
The extension does not knowingly collect personal data from children, and it stores only what the user themselves choose to enter.
9. Changes to this policy
Any updates to this Privacy Policy will be posted on this page with a new effective date.
Material updates will also be noted in the project README and Chrome Web Store or Firefox Add-ons listing where applicable.
Continued use of the extension after an update constitutes acceptance of the revised terms.
Questions about this document can be directed through the repository issue tracker or the contact details noted above.
