Host permissions serve two features: opening FACEIT demos in the DemoLens viewer and showing scouting stats in match rooms.

• www.faceit.com: content script that adds the "Watch in DemoLens" button and the scouting stats to CS2 match rooms and triggers FACEIT's own demo download.
• api.faceit.com: reads the open match room's roster (the same request the page makes) and those players' recent public match stats (rating, round swing, kills) from FACEIT's statistics API. Read-only, no credentials; required for Firefox, which runs content-script fetches under the extension's origin.
• .backblazeb2.com, .faceit-cdn.net: FACEIT's demo CDNs. One rule adds a CORS header so demolens.org can load the demo the user asked for.
• demolens.org: target of that rule, and source of public career stats and countries via the DemoLens proxy (only public player IDs are sent).

No browsing data is read and no user data is collected; demo bytes never pass through the extension.

Scout tiles now show FACEIT's own performance metrics for every player — FACEIT Rating, Round Swing and average kills from the last 30 matches. The tile layout was cleaned up: all numbers sit in fixed columns, so the ten players in a room can be compared at a glance, and values load in place instead of the tiles jumping. The map radar no longer covers the scoreboard tab.