FToWatch Privacy — 0.5.0, 17 October 2026

What the extension does
FToWatch provides account-free named rooms for up to 8 people. The host controls room access and may grant or remove playback/sharing permission for each participant. Ordinary viewers cannot change room playback or grant themselves permission.

Room and playback information
The connection service processes room names, nicknames, temporary authentication hashes, password hashes, WebRTC offers/answers, shared page URLs/titles, member roles and small playback states used for automatic fallback synchronization. There is no public room directory. Room records expire about three minutes after the host stops contacting the service and are cleaned on later requests. Short-lived hashed network counters limit requests.

External video websites
Everyone loads an external video from its original website using their own access. FToWatch does not send website cookies, website passwords or screen recordings to other participants. A shared URL may contain personal information; share it with people you trust.

Automatic episode following
After the first share, automatic episode following is on by default. Host navigation inside the watched tab on the same site sends the next detected video page URL/title to the room. Viewers who still have the watched page open follow in that existing tab without focus changes. Unrelated tabs are not navigated. Each person may disable this behavior in Advanced options. Local player-source fingerprints are used only inside the browser to identify player replacement; source media URLs/fingerprints are not sent to the room service.

Uploaded videos
Upload video explicitly sends the selected local video file and its name/type/size to the FToWatch video service. Supported uploads are MP4, WebM and Ogg, up to 512 MB. Files are stored as chunks and served on an unlisted watch page. Anyone with the watch link can access the video until the 24-hour link expiry; the watch link does not require a room password. Room closure or password changes do not immediately revoke an existing watch link. Expired video objects are cleaned during later uploads. Exported/copied links and recipient copies are outside the extension’s control.

Network services and local settings
Playback messages use encrypted WebRTC where possible, with automatic service-based fallback when direct connectivity is unavailable. Public Google/Cloudflare STUN and optional user-configured TURN services can process network addresses. Hosting infrastructure processes ordinary IP addresses and technical logs to deliver the service. Nickname, language, notification preference and optional network settings are stored locally; TURN credentials, if configured, are stored locally. Room passwords are not saved. Active room keys remain in memory in the pinned connection tab. Uninstalling removes local extension settings.

Your choices
No extension analytics, advertising or data sale. You choose the room, optional password, participant control permissions, shared page and any local file to upload. You may disable share notifications and use a compatible alternative service in Advanced options. Leaving closes your connection; the host leaving closes the room. Use the publisher contact shown on the official extension-store listing for support/privacy requests.