Effective Date: July 14, 2026
illi is a browser extension that adds mouse-gesture controls to YouTube: playback speed, navigation, bookmarks, and auto-pause. This policy explains what data illi collects, why, where it goes, and what control you have over it.
illi is local-first: the following data is stored on your device using Chrome's storage API. While you have an active account (free trial or paid), most of it also syncs across your devices so it stays consistent (see Section 1.4).
When you create an account, we collect and store:
This data is stored in our database (hosted by Supabase).
When you subscribe, payments are handled entirely by Stripe. We store only a Stripe customer ID and subscription ID to manage your plan status. We never receive or store your card number, billing address, or other payment details.
While you have an active account (during your free trial and on a paid plan), the following data syncs to our servers so it works across your devices:
We collect usage analytics to understand which features are valuable and to find bugs. This data is linked to your account through your user ID (a random identifier, not your email), so it is not anonymous. It never includes what you watch. It covers:
You can turn this off at any time (see Section 7). Each event is sanitized before storage: only the fields listed above are accepted, and everything else is stripped, both in the extension and on our server.
When you send feedback through illi, we store your message, its category (such as idea, bug, or other), and which page you were on. If you are signed in, your feedback is linked to your account and email. You can also send feedback without an account, in which case it is not linked to you. To prevent abuse, we store a one-way hashed form of your IP address (not the IP address itself) and your browser's user-agent string. Bug reports may be emailed to our team so we can follow up.
When illi crashes or encounters a bug, an error report is sent to Sentry (our error tracking service). Reports include:
Error reports do not include what you're watching, your browsing history, or your email address.
illi does not keep any record of what you watch. In one case, when illi cannot read a video's channel from the page, it sends only that video's ID to noembed.com to look up the channel name. illi stores the channel name and your speed for it, never a history of the videos you watch.
At sign-in, Cloudflare's Turnstile check uses your IP to confirm you're human. illi never receives or stores it.
| Data | Purpose |
|---|---|
| Preferences and bookmarks | Provide a consistent experience across sessions (and across your devices while your account is active) |
| Email address | Sign-in authentication, billing notifications, account communications, and product emails if you opt in |
| Subscription and payment IDs | Manage your plan, process upgrades and cancellations |
| Referral data | Track referral rewards |
| Usage data | Understand feature adoption and product milestones, identify bugs, guide product decisions |
| Feedback and cancellation survey | Improve illi and understand why people leave |
| Error reports | Diagnose and fix crashes |
We do not use any of your data for advertising, and we do not sell or rent your data to anyone.
This section matters only if you are in the EU or UK, where the law asks us to name the specific reason we are allowed to use your data. Ours are:
We use the following third-party services to operate illi. Each receives only the data it needs:
| Service | What It Receives | Why |
|---|---|---|
| Supabase (supabase.com) | Email, account data, synced preferences/bookmarks, usage events, feedback | Authentication, database, server functions |
| Stripe (stripe.com) | Email (to create a customer record), plan selection, payment details you enter directly with Stripe | Payment processing |
| Sentry (sentry.io) | Error details, extension version, user ID (not email) | Crash reporting |
| Postmark (postmarkapp.com) | Email address, email content | Sending account and billing emails |
| noembed.com | The ID of the video you are viewing (only when illi cannot read the channel from the page) | To look up the channel name so illi can remember your preferred speed for that channel |
| Cloudflare Turnstile (cloudflare.com) | Your IP address and basic browser signals, during sign-in only | Confirm you are a real person and block automated abuse of the sign-in form |
| GitHub Pages (github.com) | Standard web server logs (such as your IP address) when you visit illi.world | Hosting our website and legal pages |
| Google / Chrome Web Store (google.com) | Whatever Google collects when you install or update an extension | Distributing illi and delivering updates |
We do not sell your data or share it for advertising.
Our servers and service providers are located in the United States, which means your personal information is stored and processed there. While your information is in the United States, it may be accessible to US courts, law enforcement, and government authorities under US law.
As a Québec business, we assess whether your information will be adequately protected before using providers outside Québec, and we rely on our agreements with those providers to require them to protect it and to use it only for the purposes we set.
illi stores your settings, bookmarks, and progress on your own device using your browser's local storage, so the extension works and remembers your preferences. If you are signed in, this syncs to our servers. Our usage analytics are first-party (our own servers), not a third-party tracking service, and you can turn them off. We use no advertising cookies, and our website does not use tracking or advertising cookies.
You can stop all usage data collection at any time:
When disabled, no usage events are sent to our servers. All features continue to work normally.
You can request a copy of the data we hold about you, or ask us to correct it, by emailing our privacy officer at the address in Section 14.
You can delete your account and all associated data yourself from within illi, in the extension popup or in Advanced Settings (you'll be asked to type DELETE to confirm). Deleting your account:
If you were a paid subscriber, recovery restores your account and data, but you will need to resubscribe (your subscription was cancelled when you deleted the account). Stripe retains billing and invoice records as required by financial and tax law, and Sentry error data expires per its retention policy (typically 90 days). You can also email us to request deletion.
If you simply uninstall illi without deleting your account, your local data is removed with the extension. Your server-side data is retained until you delete your account or request deletion.
Optional things like product emails and usage analytics happen only with your consent, and you can withdraw it at any time: turn off analytics in settings, or unsubscribe from any product email.
You can cancel anytime through the Stripe Customer Portal, accessible from the illi extension popup. After cancellation, your subscription remains active until the end of your current billing period, then your account transitions to an expired state.
If you need your data in a portable format, contact us and we will provide it within 30 days.
| Data | Retention |
|---|---|
| Local data (on your device) | Until you clear extension data or uninstall |
| Account and profile data | While your account exists; on deletion, permanently removed after the 30-day recovery window |
| Cloud-synced bookmarks, progress, preferences, and channel settings | While your account exists; removed when your account is deleted |
| Items you delete in illi (such as bookmarks) | Hidden and removed from your active data right away; permanently removed when your account is deleted |
| Usage event records | Retained while your account exists, deleted on account deletion; aggregate, non-identifying statistics may be kept |
| Feedback | Kept while useful; feedback sent without an account is not linked to you; account-linked feedback is removed or anonymized on account deletion |
| Cancellation survey responses | Kept to understand why people leave; anonymized or aggregated over time |
| Sentry error reports | Per Sentry's retention policy (typically 90 days) |
| Stripe billing records | Per Stripe's retention policy and financial regulations |
| Postmark email logs | Per Postmark's retention policy |
| Cloudflare Turnstile sign-in checks | Per Cloudflare's retention policy |
No online service can promise perfect security, but we take reasonable measures to protect your information:
If a security incident occurs that presents a risk of serious harm to you, we will notify Québec's Commission d'accès à l'information and the people affected, as Law 25 requires, and we keep a record of any such incidents.
| Permission | What It Does |
|---|---|
storage | Saves your settings, bookmarks, and session data locally on your device |
alarms | Runs background timers for trial status checks and sync scheduling |
host_permissions for youtube.com and youtube-nocookie.com | Allows illi to add its interface to YouTube pages |
illi does not access any other websites. If we add support for other video sites in the future, illi will ask for your permission before accessing them.
illi is not directed at children under 13 (or the minimum age where you live). We do not knowingly collect data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.
We may update this policy as illi evolves. The effective date at the top will always reflect the latest version. If we make material changes to how we handle your data or to your rights, we will notify you through the extension or by email before the changes take effect. Continued use after changes constitutes acceptance of the updated policy.
illi is made by Wallflower Studio Inc., based in Québec, Canada. Because we are a Québec business, we follow Canadian privacy law (Québec's Law 25 and PIPEDA). Because illi is available worldwide, we also respect the GDPR for users in the EU and UK and follow applicable US law. illi handles no health, banking, or biometric data.
The person responsible for protecting your personal information (our privacy officer, as Law 25 requires) is Malka Neuman, Founder, reachable at privacy@illi.world. For general questions, contact support@illi.world. We aim to respond to all requests within 30 days.