# Privacy Policy for watchext

**Last updated:** May 2026

## What this extension does

watchext synchronizes Kocowa+ video playback across multiple users in a temporary watch party room. It connects to a user-configured WebSocket server to relay playback events (play, pause, seek) between participants.

## Data collected

### User-provided data
- **Server URL:** The WebSocket address you enter in the extension popup. Stored locally in your browser via `chrome.storage.local`.
- **Room code:** The 6-character room code you create or join. Sent to the configured WebSocket server.

### Automatically collected data
- **Tab URL and title:** The extension reads the URL and title of your active Kocowa+ tab to detect what video content you are watching. This is used only to match content between room participants and is sent to the WebSocket server.
- **Video playback state:** Current playback position (time), pause/play status, and video duration. This data is sent to the WebSocket server so other participants can synchronize.
- **Anonymous participant identifier:** A randomly generated UUID stored locally (`chrome.storage.local`) to identify you within a room session. This identifier is not connected to your identity.
- **Tab visibility state:** The extension detects whether your Kocowa+ tab is visible (focused) to determine the best tab for sync commands.

## How data is used

- All playback and content data is sent **only** to the WebSocket server URL you configured.
- Data is used exclusively for synchronizing video playback between room participants.
- No data is sent to third parties, analytics services, or advertising networks.

## Data storage

- **Local storage:** Server URL, participant identifier, and session state are stored locally in your browser using `chrome.storage`.
- **Server storage:** Room state (participants, playback position) exists only in the WebSocket server's memory and is ephemeral. Rooms are removed when all participants leave or disconnect.
- **No persistent database:** The extension does not write any data to persistent databases or external APIs.

## Data sharing

watchext does **not**:
- Sell or rent your personal data
- Share data with third parties for marketing
- Use tracking cookies or analytics scripts
- Access, modify, or download Kocowa+ video streams
- Bypass DRM or content protection

## Host permissions

The extension requests access to `https://*.kocowa.com/*` to inject sync scripts on Kocowa+ video pages. It also requests `http://localhost/*` and `http://127.0.0.1/*` for local development and testing with a mock video page.

## Network communication

The extension communicates **only** with:
1. The WebSocket server URL you configure (typically your own server or a friend's server)
2. Kocowa+ pages you visit (to inject the content script)

## Changes to this policy

If this policy changes, the extension version will be updated and this document will reflect the new date.

## Contact

For questions about this privacy policy, open an issue on the GitHub repository.

## Your choices

You can stop using the extension at any time by:
1. Removing the extension from your browser's extension settings.
2. Disabling the extension when not in use — it does not run in the background when disabled.