YASE

Permissions

Permission rationale

YASE requests browser permissions only for visible extension behavior: local saved-video search, organization, YouTube UI enhancements, account sign-in, and optional user-facing features.

Last updated: 2026-05-29

Browser permissions

storage
Stores local settings, sync state, local index metadata, tags, notes, saved searches, customization settings, and feature preferences in the browser.
alarms
Runs resumable MV3 jobs, local sync scheduling, retry work, and checkpoint cleanup without requiring a long-lived background page.
scripting
Injects YASE UI only on supported YouTube pages, including the playlist overlay, visible page enhancements, and supported customization surfaces.
identity
Launches Google Sign-In through browser identity APIs for YASE account sessions. It does not grant YouTube API access.
notifications
Optional and used only if a shipped build enables user-requested notifications.

Host permissions

https://*.youtube.com/*
Supported YouTube pages and YouTube web endpoints needed for local indexing, visible YASE UI, account detection, and supported page enhancements. This covers www, m, music, and consent subdomains.
https://youtu.be/*
Short-URL resolution and the welcome redirect used by the extension.
https://i.ytimg.com/*
YouTube thumbnails displayed in local search results, saved-video rows, and availability checks.
https://returnyoutubedislikeapi.com/*
Estimated dislike count for the optional V1 dislike-badge feature on YouTube watch pages.
https://api.yase.run/*
YASE account, session, device, entitlement, and notify endpoints.
https://api.fontsource.org/*
Declarative Fontsource catalog metadata for customization features only.
https://cdn.jsdelivr.net/*
Fontsource font files only under restricted @fontsource binary paths for customization features. No JavaScript or WebAssembly is fetched or executed from this host.

Explicit non-use

  • No all-sites access.
  • No sale of data.
  • No product telemetry.
  • No remote executable code.
  • No upload of YouTube cookies, tokens, or any YouTube account state.
  • No development hosts in the public build.