No More Watched Videos — Privacy

# No More Watched Videos — Privacy

No More Watched Videos runs entirely on your machine. No analytics, no remote sync, no telemetry. The extension reads responses YouTube sends to itself (the `innertube` API) so that it can recognise which videos you have already watched and hide them.

## What the extension stores

All data lives inside the browser, in IndexedDB (`nomorewatch` database) and `chrome.storage.local`:

- Video IDs you have watched / liked / dismissed (no titles required, but titles and channel names are kept when YouTube provides them — for the optional debug log and statistics).
- A whitelist of channel IDs and `@handle`s that should never be hidden.
- Extension settings (enabled, surfaces, TTL, language, theme, debug toggle, etc.).
- A capped, optional debug log (max 5 000 events) that you can export and clear yourself.

## What the extension transmits

Only what YouTube already would. The MAIN-world interceptor observes the regular requests YouTube makes from the page. Active sync and backfill use the same authentication YouTube uses when you open `/feed/history` yourself — no third-party endpoints are contacted.

## Data retention

Records age out according to the TTL slider in Settings (default 12 months, "Never" available). A daily pruner runs while the browser is open. You can also wipe data manually at any time via Settings → Data & reset → Clear watched videos / Reset sync state / Full reset.

## Export & portability

Settings → Data & reset → Download JSON produces a single file containing every record plus settings. The schema is `version: 1`; importing the same file on another machine reproduces the database verbatim.

## Permissions, line by line

| Permission | Why |
|---|---|
| `storage` | IndexedDB and `chrome.storage.local`. |
| `alarms` | Daily TTL prune + periodic sync heartbeat. |
| `scripting` | MAIN-world script injection on `youtube.com` (for the innertube interceptor). |
| `contextMenus` | The right-click "Toggle whitelist" item on channel links. |
| `notifications` | Backfill-complete and sync-error pop-ups, if enabled. |
| `host_permissions: https://www.youtube.com/*` | Required to run the content script and inject the interceptor. |

No `cookies`, no `webRequest` body access, no `<all_urls>` permissions.