Fullscreen Fill collects no personal data, uses no analytics, and sends nothing about you or your browsing to the developer or to anyone else.

English
What the extension stores
Everything stays in your own browser's storage.

Key Where What
enabled storage.sync whether widescreen filling is on
urlBlacklist storage.sync domains and URLs you excluded yourself
playerTypes storage.sync which player types you switched off
uiLang storage.sync the popup language you picked
configUrl storage.sync optional remote config URL you enter yourself
remoteConfig, configFetchedAt, configSource, configFetchError storage.local the last loaded configuration and its status
storage.sync means your browser syncs these settings between your own devices through your Google or Mozilla account. That runs through your browser, not through any server of this extension. If you do not want it, turn off browser sync.

Network traffic
The extension makes exactly one kind of network request, and only if you set it up yourself: fetching the remote config URL you type into the popup. That request contains nothing but the URL — no information about pages you visit, videos you watch or the device you use.

Leave the field empty and the extension uses the configuration bundled with it, and no traffic leaves your machine at all.

What the extension does on pages
To make video fill the screen, the content script reads the dimensions of <video> and <iframe> elements and applies CSS. That information stays inside the page: it is not stored, not logged and not transmitted.

Page content, form data, passwords and cookies are not read.

Why each permission is needed
Permission Used for
storage keeping your settings (see the table above)
alarms checking every 6 hours whether your remote config changed — only if you set one
activeTab the popup shows which player type the current tab runs, and the "block this page" button needs the URL
site access (:///*) video players exist on any site; without this the extension cannot adjust them. To narrow it down, use the URL blacklist or set site access to "on click" in your browser
photos.google.com is explicitly excluded in the manifest; the extension never runs there.

No selling, no sharing
There is no data to sell or share. There is no server, no account and no tracking.