Smart Video Controls is built privacy-first. This page explains exactly what data the extension reads, what it stores, and where it goes.
- Free version: everything stays on your device. Nothing is sent anywhere.
- Pro version (cross-device sync): episode URLs and playback positions are sent over HTTPS to our backend so we can sync them to your other devices. That's it.
- No tracking, no analytics, no ads, no third-party scripts.
- We never collect your browsing history, the content of pages you visit, or any personal identifier you didn't give us yourself.
What the extension reads
To do its job — keyboard shortcuts and automatic position resume — the extension reads:
- <video> elements on the page you're watching. Specifically
currentTime,duration,paused,playbackRate, andvolume. These are read in-memory only; we do not store the video content. - The URL of the page containing the video. Used as the storage key so we can restore the right position when you come back. The URL's fragment (
#…) is stripped before storage. - Keyboard events on pages with a video. We intercept Space, arrow keys,
>,<, and any custom shortcuts you set, only when no input field is focused.
We do not read:
- The text or DOM of pages you visit (beyond detecting
<video>and<iframe>elements). - Form data, passwords, cookies, or local storage of any website.
- Your browsing history, tabs, or bookmarks.
What the extension stores locally
Stored in chrome.storage.local (extension-scoped — not accessible to any website):
svc_pos::<episode_url>— your playback position per episode. Auto-deleted after 15 days of inactivity.svc_shortcuts— your custom keyboard bindings.svc_disabled_hosts— list of sites you've disabled the extension on.svc_usage_stats— counts of which shortcuts you used in the last 7 days, shown in the popup. Never leaves your device.svc_auth_token,svc_refresh_token,svc_user_id— an anonymous identifier used to authenticate Pro requests. Created on install; tied to no real-world identity unless you redeem a license key.svc_canonical_user_id,svc_license_key,svc_is_pro— set only after you purchase Pro and activate a license key.
What the Pro version sends to our backend
If — and only if — you have purchased Pro and activated a license:
| Data | Where it goes | Purpose |
|---|---|---|
| Episode URL (no fragment) | Supabase Edge Function | Sync key |
| Playback position (seconds) and duration | Supabase Edge Function | Position to restore |
| Anonymous user ID | Supabase Edge Function | Tying your devices together |
| License key (at activation time) | Supabase Edge Function | Verifying your Pro status |
| Optional feedback text + rating | Supabase Edge Function | Bug reports / feature requests you write yourself |
All requests go over HTTPS to https://pnjsyklmibspekxgslos.supabase.co. No third parties are involved. We use Supabase as a database host; they process the data on our behalf and do not share it.
Free users send nothing to our backend. The extension authenticates anonymously at install time so feedback submission works, but no positions or URLs are uploaded.
Permissions we ask for
storage— store positions and your shortcut settings locally.scripting— query<video>state in cross-origin iframe players (the extension's signature feature). Without this, video controls in embedded players would not work.alarms— wake the background service worker every 30 minutes to sync Pro positions across Chrome profiles.- Host permission
<all_urls>— we cannot know in advance which sites you'll watch videos on. We never read page content beyond<video>and<iframe>elements, and the extension can be disabled per-site from the popup.
Sites where the extension is disabled by default
YouTube, X (Twitter), Facebook, Instagram, and any host you add to the per-site disable list in the popup. On those domains we do not run the content script at all.
Third parties
- Supabase (database + serverless functions) — Pro users only. See Supabase's privacy practices.
- Stripe (payment processing) — only at the moment you click "Upgrade". Stripe receives no data from the extension; you're redirected to their hosted checkout page.
- Chrome Web Store — distributes updates. Google's standard analytics apply to the store listing itself; the extension does not call Google services at runtime.
No other third parties. No analytics SDKs. No advertising.
Data retention
- Local positions: auto-deleted 15 days after the last update.
- Pro positions (server-side): retained while your Pro license is active. Deleted on request — email the address below.
- Anonymous user IDs: retained for the lifetime of your install. Reset by uninstalling and reinstalling.
Your rights
You can:
- Delete everything stored locally by uninstalling the extension (Chrome removes its storage automatically).
- Delete Pro server data by emailing the contact below with your license key.
- Disable the extension on specific sites via the popup's "Site Access" panel.
Changes
Material changes to this policy will trigger a popup notification on next launch and a version bump on the listing page.
Contact
Questions, deletion requests, or concerns: divyamrastogi2@gmail.com
Source code: github.com/divyamrastogi/smart-video-controls