Browser extension
Zia's Show Youtube Timestamped Comments
The extension reads the current YouTube video ID, playback position and public comments so it can show comments at the appropriate time. Comment data can include comment IDs, text, author display names, timestamps and like counts.
It requests public YouTube pages or the YouTube Data API to load comments. It also sends the current video ID to https://ziameza.com/api/youtube-timestamped-comments/manifest to look for a shared comment cache. These requests reveal the requested video and ordinary network metadata, such as an IP address, to the receiving service and its hosting provider. Public shared comment manifests can be cached on the ZiaMeza service for up to 29 days from refresh. The shared service and portfolio gateway use Cloudflare Workers request logging. Operational logs can include requested URLs and video IDs, event times, status codes and request metadata. Workers application logs are retained for up to seven days under the current Cloudflare service limits. No Logpush export or tail consumer was enabled in the audited configuration. Cloudflare separately processes network and security information under its own privacy policy.
The browser keeps a local cache of comments for up to 29 days, bounded to 40 entries and pruned during use. Display preferences and an optional user-entered YouTube API key are saved in chrome.storage.sync, so Chrome may synchronize them when your browser has sync enabled. The API key is used with Google’s API, not sent to the ZiaMeza shared-manifest endpoint. Optional Google authorization is handled by Chrome identity; tokens are used with the YouTube API.
Public builds do not persist or mirror developer diagnostic logs. Default console diagnostics retain event names and numeric/boolean timings or counts, without video IDs, comment text, or page URLs. The package includes no advertising or analytics code.
Clear an optional API key in extension options to stop using it. Removing the extension clears its ordinary local data under Chrome’s behavior; manage any Chrome-synchronized data and Google account authorization through the corresponding Google controls. Contact us for questions about requests to the shared service. Public comment cache entries are keyed by video, not by a user account.
Contact: Zia Meza, ZiaMeza@gmail.com.
No user data is sold or used for advertising by the packaged extension. Any future change to these practices should be reflected in this policy and the relevant store disclosures.
Google authorization is optional. The comment API currently lists the youtube.force-ssl scope, whose Google permission wording includes editing and deleting YouTube content. This extension uses it only to request comments; it implements no YouTube comment, video or rating write/delete request. You can use the public fetching paths without granting this permission.