Privacy Policy for the “YRIS 같이보기” (YRIS Watch Together) Chrome extension
This page explains what user data the Chrome extension “YRIS 같이보기” (the “extension”) collects, how we use it, how long we keep it, and with whom we share it. It is part of the YRIS Privacy Policy. The full policy, which also covers the YRIS website, is at https://yris.live/policies/privacy-policy (Korean and English; the Korean text governs).
1. What the extension does
The extension shows a YRIS Watch Together room in Chrome’s side panel, next to a Netflix tab. It works only for users signed in to YRIS.
- Playback sync: the room host’s Netflix playback is the reference, and each participant’s Netflix player follows it.
- Room chat: messages of up to 200 characters, reporting a message, blocking a member, and “CleanChat”, which hides messages the server marked as profanity (called “Cleanbot” in version 2 of the full policy).
- Participants: the participant and viewer lists. The host can remove a participant from the room.
- Guide chatbot: a “Chatbot” tab that answers questions about the story of the title, using only YRIS guide content up to the episode the room is watching.
- Settings: panel language (Korean or English) and dark mode.
2. Data the extension collects
The extension collects or processes only the data below, and only to provide the features in Section 1. Categories follow the Chrome Web Store’s user data categories.
| Category | Data | When and why |
|---|---|---|
| Personally identifiable information | Your YRIS member ID (a random identifier, not your email address), nickname, and identification code. To show other participants, the extension also receives their member IDs, nicknames, and identification codes. | When you sign in and when you join a room, to show who wrote each message and who is in the room |
| Authentication information |
The YRIS sign-in cookie yris_rt. The extension sends
it only to api.yris.live to get an access token that
is valid for 10 minutes; the server replaces the cookie each time.
The access token is sent with each request to YRIS servers.
|
To carry over the sign-in you made on yris.live; no separate sign-in in the extension |
| Personal communications |
|
When you use chat, report, block, CleanChat, or the Guide chatbot |
| Website content |
On Netflix pages only:
|
While a Netflix tab is linked to a Watch Together room, to keep playback in sync and to keep the room on its episode |
| Web history | The Netflix video number you are watching. It is sent only when you are the host, inside each playback report, so the server can check that you are on the room’s episode. The server compares it on arrival and does not store it. | Only while you are the host of a room |
| User activity |
|
While you are in a room, or when you use the Guide chatbot |
| Location (IP address only) | The IP address and browser information (User-Agent) that reach our servers when the extension connects. No GPS or precise location. | Each time the extension connects to our servers |
Data the extension does not collect
- Your Netflix account, profiles, viewing history, cookies, or page storage
- Text shown on web pages, including titles and subtitles
- Data from any website other than Netflix pages and YRIS
- Health, financial, or payment information, or precise location
The extension contains no analytics, advertising, or tracking code, and it does not load or run code from the network.
3. How we use the data
- To sign you in to the extension with your YRIS sign-in, and to sign you out when you sign out on yris.live
- To show rooms, participants, and chat, and to keep participants’ playback in sync with the host
- To answer your Guide chatbot questions, let you continue earlier conversations, and apply usage limits
- To prevent abuse: blocking chat flooding, handling chat reports, and applying blocks and CleanChat
- To keep the service secure and to detect outages
Guide chatbot answers are generated by an external generative AI service (OpenAI, Section 4.b). Please do not type information that identifies you or others, such as names, contact details, or addresses, into the chatbot. We do not use your questions or conversations to train AI models.
We do not sell user data. We do not use or transfer it for advertising, for personalized ads, or to determine creditworthiness or for lending, and we do not use it for any purpose unrelated to the features in Section 1.
4. How we share the data, and with whom
User data from the extension is shared only with the parties below.
a. Other YRIS users
- Participants in the same room see your member ID, nickname, and identification code, your chat messages, whether you are connected, and whether you are the host. If the host removes a participant, the room is told who was removed. When you are the host, your playback position and status are sent to the other participants’ extensions so their playback can follow yours.
- Anyone, including people who are not signed in, can see the Watch Together room list on yris.live. For each listed room (public and password-protected) it shows the room title, room type, title and episode range, the episode now playing, the host’s member ID, nickname, and identification code, the number of viewers, and when the room was created.
- Signed-in YRIS users can see the host, current episode, and playback position of any room in the room list, including password-protected rooms, before joining.
- Your Guide chatbot conversations are not shown to other users.
b. Service providers that process data for us
| Provider | What they do | Data they receive | Location |
|---|---|---|---|
| Amazon Web Services, Inc. / Amazon Web Services Korea LLC | Hosting our servers, databases, and logs | All data in Section 2 that reaches our servers | Stored in the AWS Asia Pacific (Seoul) Region; AWS operations and support may involve the United States |
| Datadog, Inc. | Performance monitoring and outage detection | Records of requests to our servers: the request address or route (which may contain a room number, a message number, or the member ID of a blocked member), method, result, timing, and User-Agent; for some servers, the IP address | United States (US5 region) |
| OpenAI OpCo, LLC | Generating Guide chatbot answers | Your question; earlier questions and answers in the same conversation and a summary of the conversation; the title name, episode titles, and character and term lists up to the answer’s episode; and the guide content used as sources. The same question is also checked for safety, and older parts of a conversation are sent to be summarized. No member ID, name, or email address is sent. Sent only when you ask the Guide chatbot a question. | United States |
| Langfuse GmbH or ClickHouse, Inc. (Langfuse Cloud) | Tracking errors in Guide chatbot answer processing | Title number, the episode the answer is based on, language, processing steps and outcome, and amount processed. No question or answer text, no member ID, and no conversation ID. | Japan (Tokyo region) |
The extension does not send your data to Netflix, Google, or any company not listed above. On Netflix, it only opens the watch page for the room’s episode and controls the player inside the page: play, pause, moving the position, pausing just before an episode ends, starting a newly opened episode from the beginning, blocking controls that switch episodes, returning the tab to the room’s episode, and pressing “Watch Credits” when the next-episode countdown appears. It does not insert ads or other content into Netflix pages.
c. Legal requirements
We disclose data only when the law requires it (for example, a warrant from an investigative agency), or when it is clearly necessary to protect someone’s life, physical safety, or property. If the operator of YRIS changes, we will notify you before any data is transferred.
d. Access by the YRIS team
Team members look at this data directly only to investigate reported chats, to respond to security incidents, to comply with the law, or when you ask us to in an inquiry.
5. How long we keep the data
a. On our servers and with our providers
| Data | Kept until |
|---|---|
| Chat messages | 90 days after they are written |
| Chat reports and reported messages | 6 months after the report is resolved, and at most 1 year after it is received. The reported message and the reason you typed are also written to service logs. |
| Room, participation, host-change, and removal records; block list; CleanChat setting | Until you delete your YRIS account. A block is deleted as soon as you remove it. |
| Playback sync state and connection status | The room ends (60 seconds with no one connected, or when the room’s episodes are finished) |
| The host’s Netflix video number in playback reports | Not stored |
| IP address and User-Agent received on connection | The connection ends (kept in server memory only). If a message is blocked as flooding, the member ID, room, and IP address are written to service logs. |
| Short-lived checks: chat flood counts, duplicate-send checks, nicknames cached for display | 10 seconds, 3 minutes, and 1 hour |
Sign-in: the yris_rt cookie, the access token, and
the record of replaced sign-in tokens
|
The cookie lasts 14 days and is renewed each time it is used; the access token lasts 10 minutes; a replaced token’s record is kept only until that token would have expired |
| Guide chatbot questions, answers, conversation titles (the beginning of the first question), and conversation summaries | 90 days after they are written |
| Guide chatbot usage counts and the temporary record kept while an answer is being generated | Up to 24 hours |
| Service operation logs | Up to 3 months |
| Datadog request records | Up to 30 days |
| Guide chatbot requests kept by OpenAI | Up to 30 days, under OpenAI’s API data policy (not used to train its models) |
| Langfuse processing records | 90 days |
| Database backups | Up to 35 days, used only to recover from outages |
When you delete your YRIS account, the data linked to your account is deleted within 5 days, and room records shared with other users are anonymized. Records with a fixed period above (such as chat messages) are deleted when that period ends. An access token issued to the extension before deletion may keep working for at most 10 minutes.
b. In your browser
-
chrome.storage.session, cleared when you close Chrome: the access token and its expiry, your sign-in status and member ID, which Netflix tab is linked to which room, and the last video number the extension returned a tab from. -
chrome.storage.local, kept until you remove the extension: your panel language and theme. - Panel memory only, cleared when the panel closes: recent chat messages (up to 500), participants, your block list, and the Guide chatbot conversation. If a different account signs in, these are cleared at once.
- When you sign out on yris.live, the access token is deleted and the connection to the Watch Together server is closed.
6. Security
- All data between the extension and our servers travels over encrypted connections (HTTPS and secure WebSocket, TLS 1.2 or later).
-
The extension reads only one cookie,
yris_rt, and never reads, changes, or sends other cookies. The access token is never given to scripts running in Netflix pages. - Only yris.live pages can send requests to the extension, and only three kinds: checking whether it is installed (the answer is “installed” and its version), opening a room (a room number and the Netflix address of its episode, which opens or focuses the Netflix tab and the panel), and checking for an update.
- Our chatbot server filters its logs so that question text is not recorded.
7. Your choices and rights
- Sign out on yris.live to sign out of the extension.
-
Remove the extension at any time from
chrome://extensions. This deletes its browser storage. - Turn CleanChat on or off in the panel’s settings. Remove blocks on yris.live (Profile).
- If you do not use the Guide chatbot, nothing is sent to OpenAI or Langfuse.
- Delete your YRIS account on yris.live (Profile > Account settings > Delete account).
- Ask to access, correct, or delete your data, or to stop processing it, by emailing yris.anime@gmail.com.
8. Children
YRIS accounts are only for people aged 14 or older. The extension works only with a YRIS account.
9. Chrome Web Store User Data Policy
The use of information received by this extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.
10. Changes to this policy
If we change how the extension handles data, we will update this page and the date above, and announce the change in the full YRIS Privacy Policy.
11. Contact
YRIS Operations Team, Privacy Desk
Email: yris.anime@gmail.com