Privacy
YFE customizes YouTube and supports focus sessions. Its settings and processing stay in your browser. The extension has no developer-operated backend, account system, analytics or advertising service.
Data used on your device
- Website content and URLs: on
www.youtube.comandwww.youtube-nocookie.com/embed/*, content scripts read page URLs, video/channel identifiers, titles, public author names and handles, comments, posts, page structure and player state to apply your appearance, filtering, navigation and player choices. - Activity: focus controls use playback state, page visibility and recent pointer, keyboard or scroll activity to calculate inactivity. They use activity timestamps; they do not record typed keystrokes or build a browsing-history log.
- Settings: browser-local extension storage holds appearance choices, presets, filter rules, schedules, session timestamps and temporary blocking state. Rules may contain names, handles, text, IDs or URLs that you choose to save.
- Optional protection: a settings password is processed locally and saved as a salted PBKDF2-SHA256 verifier, not as the original password. Confirmation phrases are stored as readable text. Temporary authorization state stays in browser session storage. A password-recovery request stores its deadline locally and disables protection after the chosen delay unless you cancel it. Other settings are kept. This feature is a self-control aid, not an account or security boundary.
Page content is processed in memory rather than saved as a page archive. A rule you explicitly add from a YouTube menu is saved locally. Content scripts receive the configuration needed for their features through extension messages. Chrome restricts direct storage access to trusted extension contexts. Firefox keeps authoritative settings and protection records in extension-origin IndexedDB, with temporary authorization in restricted session storage; only the language preference uses shared local storage.
Network requests and sharing
YFE does not send settings, rules, credentials, page content or activity to its developer or an analytics service. It does not sell data, use it for advertising, transfer it to data brokers or use it to assess creditworthiness.
If you enable thumbnail replacement, your browser requests the selected video's image from YouTube's i.ytimg.com. YouTube receives the video ID in that image URL and normal network request information, such as your IP address. YouTube also continues to make its own normal requests. Its services follow Google's privacy policy. Installed fonts stay local by default. If you enable Google Fonts downloads, the browser requests the selected family and weights from fonts.googleapis.com and font files from fonts.gstatic.com. Google receives the font choice and normal request metadata, such as your IP address. YFE does not include page text, filter rules or credentials in these requests. Turning off the option removes its stylesheet; fonts may remain in the browser cache. All executable JavaScript ships in the package; YFE does not load remote scripts.
YFE uses data only to provide its stated focus and customization features, in accordance with the Chrome Web Store User Data Policy, including the Limited Use requirements.
Retention and your choices
Saved settings remain in this browser profile until you change or remove them or uninstall YFE. Session state is updated as focus sessions advance; temporary authorization uses the browser's session storage. You can edit rules and settings in the Chrome side panel or Firefox/Zen sidebar. Uninstalling the extension removes its extension storage.
JSON export is optional and writes a file you control. Exports include settings, presets, rules and schedules, but exclude protection credentials, active sessions, password-recovery requests and temporary blocking deadlines. Exported files remain wherever you save them until you delete them. Do not put sensitive information in a confirmation phrase or share an export without checking its contents.
Support and this website
This policy covers the extension. Opening the project website, repository or support links uses the respective hosting service. A support issue is public: remove personal settings, names and private details before posting.