Privacy policy
Effective 24 October 2026
CommentTribe is a browser extension for Chrome and Firefox. It has no accounts, and it keeps your data in your own browser. This page lists everything it sends anywhere, and why.
What stays in your browser
- The commenters you star, the communities you make, and your settings.
- Your activity history: the videos where CommentTribe found your starred commenters.
- Your YouTube API key, if you add one. It is only ever sent to Google, as part of YouTube API calls.
None of this is sent to us. You can export it to a file or delete it at any time by removing the extension.
What is sent, and only when you use that feature
| Sent to | When | What |
|---|---|---|
| YouTube Data API (Google) | You have added an API key | The video and channel IDs being looked up, with your key. |
| CommentTribe Sync server | You turn on Community Sync (off by default) | IDs only: the comment, video and commenter IDs you found, the channel IDs you follow, and a random install ID. No names, no comment text, no account. The server keeps no request logs. |
| Mojang API | You set a Minecraft skin by name | The Minecraft username you typed. |
| mc-api.io | A Minecraft skin is shown | The Minecraft player ID. |
| Google (sign-in and Cloud APIs) | You choose "Sign in with Google" to make an API key | See the next section. |
Signing in with Google to make an API key
Getting a YouTube API key normally means several steps in the Google Cloud console. CommentTribe can do
them for you if you sign in with Google and allow it. It asks for the
https://www.googleapis.com/auth/cloud-platform permission, and uses it only to:
- create one new Google Cloud project in your account, named "CommentTribe key",
- turn on the YouTube Data API (and the API Keys API) in that project, and
- create one API key in that project, restricted to the YouTube Data API, and read it so the extension can save it.
Then the extension revokes the permission straight away. It does not read, change or delete any of your other Google Cloud projects or data, and it does not keep the sign-in token. The token and the key go only between your browser and Google. They are never sent to us or anyone else.
CommentTribe's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
The project and key are yours. You can see or delete them any time in the Google Cloud console. You can also check and remove CommentTribe's access at myaccount.google.com/permissions.
What we never do
- Sell or share your data. We don't have it to sell.
- Show ads or use tracking or analytics.
- Read your Google or YouTube account, or sign in to YouTube.
Changes
If this policy changes, the new version will be posted here with a new effective date.
Contact
Questions about privacy: brandoblues@gmail.com