Privacy & data

What stays in your browser

The extension stores your appearance preference, display name and the session details needed to reconnect, including your room membership and a session credential. Leaving a room ends that membership; your saved display name remains until you change it or remove the extension.

What is shared with the room

The server receives your display name, connection status, and shared playback information: the YouTube video ID, playback position, play or pause state, speed, and control mode. Members in the room can see names and connection status. The invitation page shows the host’s name, member count, control mode, and whether a video is selected.

Anyone with the invitation or room code can attempt to join. Share invitations only with people you want in the room. Rooms do not have passwords or a waiting room.

How long it stays

We temporarily keep room state and session credentials on the server to synchronize playback and restore connections. The Cloudflare deployment uses SQLite-backed Durable Objects; the original Node deployment uses memory. Members are removed when they leave or their disconnected session expires. Rooms end when empty or after a maximum of 24 hours. SameFrame does not keep a permanent viewing history. Hosting-provider recovery copies may follow the provider’s own retention policies.

The Cloudflare deployment does not enable application request-log storage. Application error messages contain error types rather than request bodies or session credentials. IP addresses are used for connection limits. Cloudflare may process technical network and security data under its own policies; application settings do not control all provider records.

What the extension can access

On supported YouTube pages, the extension reads and changes the video’s playback state and navigates the bound watch tab to the room’s selected video. It uses browser storage for your name and session, and communicates with the configured SameFrame server. A content script on that server’s invitation pages detects the extension and handles a join after your confirmation.

When you create a room from an already open YouTube page, the scripting permission lets SameFrame reconnect its bundled playback adapters without reloading that page. Only your room’s bound watch tab sends playback controls. SameFrame does not need access to your YouTube account password, email, microphone, camera, or video files.

Third-party services

YouTube delivers the video directly to each participant under its own policies, account requirements, regional availability, and advertising behavior. SameFrame does not bypass access restrictions. The invitation site does not include analytics trackers, advertising scripts, or external fonts. It saves your selected appearance in this browser’s local storage; the website and extension keep separate appearance preferences.

Your choices

You can edit your name in the extension, leave the room to stop synchronization, or remove the extension to clear its local storage. Leaving does not close or intentionally pause your video. For support or privacy questions, contact sameframe.team@gmail.com.

Service provider

SameFrame is published as SameFrame. Contact: sameframe.team@gmail.com. The Cloudflare deployment uses Cloudflare Workers and Durable Objects. Learn how the hosting provider processes data in Cloudflare’s privacy policy. Chrome Web Store installation is available only after the extension is published.