Effective 25 October 2026

CommentTribe is a browser extension for Chrome and Firefox. It has no accounts, and it keeps your data in your own browser. This page lists everything it sends anywhere, and why.

• The commenters you star, the communities you make, and your settings.
• Your activity history: the videos where CommentTribe found your starred commenters.
• Your YouTube API key, if you add one. It is only ever sent to Google, as part of YouTube API calls.

None of this is sent to us. You can export it to a file or delete it at any time by removing the extension.

• YouTube Data API (Google): when you have added an API key. Sends the video and channel IDs being looked up, with your key.
• CommentTribe Sync server: when you turn on Community Sync (off by default). Sends IDs only: the comment, video and commenter IDs you found, the channel IDs you follow, and a random install ID. No names, no comment text, no account. The server keeps no request logs.
• Mojang API: when you set a Minecraft skin by name. Sends the Minecraft username you typed.
• mc-api.io: when a Minecraft skin is shown. Sends the Minecraft player ID.
• Google (sign-in and Cloud APIs): when you choose "Sign in with Google" to make an API key, or "Get my key back". See the next section.

Getting a YouTube API key normally means several steps in the Google Cloud console. CommentTribe can do them for you if you sign in with Google and allow it. It asks for the https://www.googleapis.com/auth/cloud-platform permission, and uses it only to:
- create one new Google Cloud project in your account, named "CommentTribe key" and labelled made-by: commenttribe,
- turn on the YouTube Data API (and the API Keys API) in that project, and
- create one API key in that project, restricted to the YouTube Data API, and read it so the extension can save it.

CommentTribe remembers that project's ID in your browser settings. If you run it again, or press "Get my key back" after your key was removed, it reuses that project and its key instead of making new ones, so it never uses up more of your Google Cloud projects. If the saved ID is gone (for example after reinstalling), it finds the project by its label, or by the "ct-key-" that starts the ID of every project CommentTribe makes. "Get my key back" never creates a project.

Then the extension revokes the permission it needed, straight away. It does not read, change or delete any of your other Google Cloud projects or data, and it does not keep the sign-in token. The token and the key go only between your browser and Google. They are never sent to us or anyone else.

CommentTribe's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

The project and key are yours. You can see or delete them any time in the Google Cloud console. You can also check and remove CommentTribe's access at myaccount.google.com/permissions.


Two features read pages on console.cloud.google.com, and only after you allow it in a browser prompt:
- The step-by-step key guide reads the Google Cloud pages you visit while it runs, to point at the right buttons and to pick up your new key when Google shows it.
- The "Sync Google API Quota" button reads one number from the quota page it opens: how much of the YouTube Data API's daily allowance your key has used today, so the extension's own count can match it.

Nothing read from these pages leaves your browser, and CommentTribe gives the access back as soon as it's done.

• Sell or share your data. We don't have it to sell.
• Show ads or use tracking or analytics.
• Read your Google or YouTube account, or sign in to YouTube.

If this policy changes, the new version will be posted here with a new effective date.


Questions about privacy: brandoblues@gmail.com

The latest version is always at https://commenttribe.com/privacy