Minimal permissions
The extension runs on YouTube pages to control the selected video and show the pet. Optional host permissions, such as SponsorBlock, are requested only after explicit enablement.
What the extension does not do
It does not load remote executable code, create a cloud profile on first launch, or send watch history to chrome.storage.sync.