PRIVACY · doki.best/privacy · last updated 2026-06-02
The room belongs
to the two of you.
doki is a Chrome extension for two people to watch web video together —
synced playback, an always-on voice line, shared cursors, chat. This page
is the plain-English account of what doki touches, what stays on your
device, and what we never see.
SECTION 01 · WHAT DOKI HANDLES
The short list.
doki does not require an account. It does not ask for your name, email, phone number, or any persistent identifier. The only data doki touches is:
- A short-lived room code (7 characters) used to pair two browsers.
- Microphone audio, captured only after you grant the browser permission, and only while a room is active. Audio is streamed peer-to-peer over WebRTC directly to your partner. doki's servers never receive, record, or store voice audio.
- Camera video (optional), captured only if you turn your camera on inside a room and only after you grant the browser permission. Your camera is off by default and opt-in per person. While on, your video is streamed peer-to-peer over WebRTC directly to your partner — exactly like the voice line. doki's servers never receive, record, or store camera video, and turning the camera off stops the capture immediately.
- Room events — chat messages, reactions, cursor coordinates, video play/pause/seek timestamps, and lightweight video metadata (the video element's source URL, the page title, and a site identifier like youtube or bilibili) so your partner can see what you're watching — all exchanged peer-to-peer over WebRTC. Never routed through our servers, never stored.
- WebRTC connection metadata (SDP offers, answers, ICE candidates) relayed through our Cloudflare Worker signaling server only long enough to establish the direct peer connection, then discarded.
- STUN traffic with third-party servers. To discover the network path between the two of you, WebRTC sends short ICE/STUN binding requests to two public STUN servers — Google (stun.l.google.com) and Twilio (global.stun.twilio.com). These servers see your browser's public IP address during connection setup. They are stateless, do not see your voice, chat, video, or room code, and are operated by those companies under their own privacy policies. We do not control or contract with them.
- Local-only state: a first-install timestamp and any pending invite code, stored in your browser via chrome.storage.local. This data never leaves your device.
SECTION 02 · WHAT NEVER HAPPENS
What doki does not do.
- doki does not read, log, or transmit the body content of any web page you visit. The content script only touches the page's <video> element, its source URL, the page title, and your mouse position while a room is active.
- doki does not track your browsing history. Pages you visit while no room is active are never reported anywhere.
- doki does not see, store, or relay the video or audio content of pages you watch — the original video stays on its original host.
- doki has no analytics, no advertising SDKs, no third-party trackers.
- doki does not sell or transfer user data to third parties.
- doki does not use your data for anything outside its single purpose: connecting two people to watch web video together.
SECTION 03 · WHO CAN SEE WHAT
Two people, one room.
- Your partner in the room, via the direct peer-to-peer connection. They hear your voice, see your camera video if you choose to turn it on, see your chat and reactions, and — while the room is active — see your cursor on whichever page you currently have open in the foreground tab, plus the source URL and title of any video playing on that page. If you switch to a different page while still in the room, cursor sharing follows the page you're on.
- Our signaling server (a Cloudflare Worker at doki.best) sees only that two anonymous browsers are exchanging connection metadata for a given room code. It holds no database and retains nothing after a room closes.
- Public STUN servers (Google and Twilio) briefly see your browser's public IP address during connection setup so WebRTC can find a path to your partner — see Section 01.
- No one else. Rooms are two-up only — never more than two participants, no public rooms, no stranger matching.
SECTION 04 · PERMISSIONS, EXPLAINED
Why each permission exists.
The extension declares a small set of Chrome permissions. Each one has a specific, narrow job:
sidePanel
Runs doki's entire UI — room controls, voice, chat — inside Chrome's side panel so it stays visible while you watch.
storage
Stores the install timestamp and any pending invite code locally in your browser. Never synced to Google, never sent to us.
activeTab
Lets the side panel attach the room to the tab you're focused on when you click the doki toolbar icon.
scripting
Injects doki's video and cursor script into the tab you explicitly attach to a room, and only after that user action.
tabs
Reads the active or attached tab's URL and title so Doki can label the page being shared and ask Chrome for site-specific access. It does not grant page content access.
webNavigation
Listens for clicks on doki.best/r/<code> invite links so the partner skips straight to the side panel. Scoped to doki.best only.
site access (optional)
Requested only for the current site when you allow Doki there. Site access lets the content script attach to the <video> element on the page you watch, listen for play/pause/seek events, read the video's source URL and page title so your partner can see what you're watching, track your mouse position to share the cursor, and draw your partner's cursor overlay. It does not read the rest of the page.
SECTION 05 · CHILDREN
Not for kids.
doki is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has interacted with doki, contact us and we will help.
SECTION 06 · CHANGES TO THIS POLICY
If anything changes.
If we update this policy, the date at the top of the page changes and a note is added to the extension's release notes on the Chrome Web Store. Material changes to data handling — if any ever happen — will be highlighted in-product before they take effect.
SECTION 07 · CONTACT
Get in touch.
Questions, concerns, or a privacy request: support@doki.best.