Is YCS - YouTube Comment Search safe?
YCS fetches YouTube comments, transcripts and live chat from YouTube's own API to power its comment search, and caches them locally.
On youtube.com the extension injects a page-context script that calls YouTube's internal InnerTube API (youtubei/v1/next, live chat, and caption tracks) using your existing logged-in session to pull a video's comments, transcript and live chat. The collected data is stored only in a local IndexedDB cache keyed by video ID so the search feature can work. No data is sent to any server outside youtube.com.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 1.1.14. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on youtube.com
*://*.youtube.com/*
Store data in your browser
storage
Run its own code inside the pages you visit
scripting
Where it sends data
Destinations our analysis observed YCS contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- www.youtube.comwidely used
YCS sends data to www.youtube.com. A widely used service: 50 other extensions we have analyzed send data here.