Privacy Policy

YouTube Oldest Comment — Last updated September 2026

This privacy policy describes how the YouTube Oldest Comment Chrome/Edge extension ("the Extension") handles your data.

YouTube API Services

This Extension uses YouTube API Services. By using this Extension you also agree to the YouTube Terms of Service and Google’s Privacy Policy, which govern how YouTube API data is accessed and handled.

What data we access

When you use Automatic Setup (Google Sign-In), the Extension requests an OAuth 2.0 access token with the youtube.force-ssl scope. This token is used solely to call the YouTube Data API v3 to read public comment threads on YouTube videos you choose to sort. When you use Manual Setup, your YouTube Data API key is used for the same purpose.

What data we store on your device

The Extension stores the following data locally on your device using chrome.storage.local, a browser-provided storage mechanism similar to localStorage. No cookies are used. All data listed below remains on your device only:

• Your OAuth access token and its expiry time, used to make authenticated API requests on your behalf.
• Your Google account name, email address, and profile picture URL, displayed inside the extension popup.
• Your YouTube Data API key (Manual Setup mode only), stored so you do not need to re-enter it.
• A temporary cache of fetched YouTube comments for recently viewed videos, retained for up to 30 minutes to avoid redundant API calls, then automatically expired.
• A count of daily YouTube API quota units used, reset every 12 hours.
• Your chosen setup mode (Automatic or Manual).

How we use your information

The information stored on your device is used exclusively to operate the Extension's core feature: retrieving and displaying YouTube comments in chronological order. Specifically:

• Your OAuth token or API key is sent directly to Google's YouTube Data API v3 on your behalf to fetch comment data.
• Your account name, email, and picture are displayed only within the Extension popup — they are not processed or used for any other purpose.
• Cached comment data is used only to avoid duplicate API requests for the same video within the same session.

How we share your information

We do not share your information with any internal or external third parties. No data is transmitted to any server operated by the developer. The Extension communicates only with Google's APIs (googleapis.com) directly from your browser on your behalf. No analytics, tracking, advertising, or telemetry of any kind is collected or transmitted.

Data retention and deletion

Comment cache data is automatically deleted after 30 minutes. OAuth tokens are deleted immediately when you sign out using the Sign out button in the popup. You can revoke all access and remove all stored data at any time by signing out and then uninstalling the Extension. You can also revoke Google account access at myaccount.google.com/permissions.

Device storage disclosure

The Extension uses chrome.storage.local to store the data described above directly on your device. This storage is isolated to the Extension and is not accessible by websites or other extensions. The Extension does not use browser cookies, web storage (localStorage/sessionStorage), or any other tracking technology.

Contact

For questions about this policy, contact danieldavey2008@gmail.com.