Telegram Web does not natively allow downloading protected or restricted media from private groups and channels. This extension injects download UI directly into the Telegram Web interface, enabling one-click saving of videos (via chunked byte-range fetches) and images to the user's computer.

1) User installs extension and opens Telegram Web (web.telegram.org). 2) User browses their groups/channels. 3) When viewing media (video/image), the content script injects a download button into Telegram's native media viewer UI. 4) User clicks the download button. 5) For videos, the extension performs chunked Range-header fetches with a visible progress bar. 6) The file is saved locally as MP4 (video) or JPEG (image).

Target users: Telegram users who need to save videos/images from private groups or channels / Users of Telegram Web (A and K versions) on desktop browsers / Content archivists who want to download Telegram media locally

signInWithGoogle locale key exists but is unused — cannot confirm if login will be required in future versions
Store description claims 'premium' tier with unlimited downloads but no corresponding code exists — cannot determine if paid features are real
Content script is minified/single-line making it harder to fully audit, though the logic is readable

Monetization

Unknown

No monetization details are available yet.

Confidence: 0
Payment platform: --
Source: None / Medium
Login required: No
Reason: The extension itself does not require login. A 'signInWithGoogle' i18n key exists in all locale files but is NEVER referenced in popup.html or popup.js — the popup only renders an extension name, description, an 'Open Telegram Web' button, and a community link. The content_script.js contains no auth logic. Users must be logged into Telegram Web (destination service) to access private media, but that is Telegram's requirement, not enforced by the extension. The 'signInWithGoogle' string appears to be an unused/placeholder locale key.

Permission risk

Medium-risk permissions

This estimate uses declared permissions and host permissions to assess access scope and sensitivity.

未命中敏感权限或广域站点访问规则

Publisher

vastflow

Independent publisher

Email: [email protected]
Phone: --
Address: --

Public contact fields are shown above. Developer portfolio pages are available on paid accounts.

View developer portfolio

Permissions

Host access