Browser extensions starting with C

Chatsup sends login email addresses and one-time codes to Growby in GET request URLs.

CheckFlow Browser Relay can attach its local debugger relay to sites saved in its own blocklist.

Chess Free Online sends a persistent user identifier and app visit details to bot.izibit.net when the game opens.

Chess Helper (chess.com) sends Chess.com board positions to stockfish.online for move recommendations.

Chess.com Custom Pieces & GIF Background sets a fixed Chess.com referral cookie on matching pages.

Chestr sends active-page product metadata to its Chestr popup iframe when you open the extension.

Christmas Decorations Wallpaper New Tab sends your Chrome top-sites URLs to Google's favicon service.

Christmas Tree in Town Live Wallpaper inserts remote Gameograf popup HTML into its new-tab page.

Chrome Auto Refresh loads a remote Font Awesome stylesheet when its popup opens.

Chrome Reload All Tabs lets any web page click its injected widget to reload browser tabs.

Cinnamoroll Cursor exposes part of its extension runtime ID in every webpage via an injected style class.

Ciphix Mendix dev tools saves Mendix passwords and bearer tokens in page localStorage as plaintext.

Citavi Picker (Beta) scans webpages for bibliographic identifiers and checks them against the user's local Citavi project.

CiteMaker CiteWeb loads a StatCounter tracking pixel from its popup over cleartext HTTP.

CityU Quick Course Adder loads its popup stylesheet from jsDelivr when the extension popup opens.

Classic Games for Chrome loads Playtik game iframes from any webpage where a user opens a game.

Claude2PDF sends the active Claude page HTML to www.aihuoji.com when exporting a conversation to PDF.

Clifl reads YouTube page data and account identifiers during server-directed viewing tasks.

ClipType inserts typing controls that load button icons from img.icons8.com on the active page.

Clipboard Inserter Redux repeatedly reads clipboard text and inserts it into the active page after the user clicks it.

Cloudhood can apply user-configured request headers and cookies to every URL your browser requests.

Cloudinary Media Inspector stores request and response headers for visited pages for local inspection.

Clown Wallet lets any website make the extension send an eth_chainId POST to a wallet RPC URL before approval.

Cnfans + rewrites CnFans product URLs to the author's affiliate ref code 37818.

CoCites [Beta] sends Google Scholar result titles to NCBI E-utilities to find matching PubMed IDs.

CoSchedule sends the current page URL, selected text, and discovered image URLs to app.coschedule.com when you open its share overlay.

Cobalt lets allowlisted websites read its full local wallet storage through external messages.

Codeforces POTD sends your Codeforces handle and streak updates to its backend.

Codental Connect sends the active WhatsApp chat phone number to Codental patient search after login.

Cognism - Sales Intelligence Extension embeds a DataStax Langflow bearer token and sends AI prompt input to DataStax.

CoinTool - MetaSafe accepts page messages that can approve its wallet-warning dialog.

Colada DevTools stores page-posted Colada debugging payloads in the extension's local browser storage.

Collaboration 7 sends calendar meeting subjects and attendee emails to Wildix Integration Service when creating meetings.

Collaborator Link Assistant sends domains from Google and Ahrefs pages to collaborator.pro.

Colleague AI sends selected text, page URLs, screenshots, file uploads, and grading PDFs to api.colleague.ai.

Color Picker loads Google Fonts from its popup, sending a request to Google when the extension UI opens.

ConcertPal removes Ticketmaster framing protections to load hidden pages and reuse the tmpt cookie.

Conductor Monitoring sends active account-domain page URLs to Conductor's GraphQL API for monitoring checks.

Confluence Chrome Extension - Meetical sends Google Calendar event IDs to app.meetical.io when its event widget loads.

Confluence to Markdown reads page content from Confluence tabs and saves converted Markdown locally.

WhatsApp Contact Exporter sends WhatsApp Web page telemetry to Google Analytics.

Contact Extractor automatically extracts contact details from visited pages and stores up to 2,000 records locally.

ContentStudio sends selected page and social-post content to its API for previews, short links, and publishing.

Cookie Decliner sends visible page text and the current URL from every HTTP(S) tab to carmesin.me.

Cookie Editor reads cookies for selected domains and lets users copy or export them locally.

Cookie Viewer reads and displays cookies for the current tab when its popup opens.

Cookies Transfer exports cookies for a user-entered website into a local JSON download.

Cool Papers Redirector sends selected text from any page to papers.cool when its search fallback runs.

Couponuts checks visited site domains with app.indoleads.com to find coupon offers.

Coursera Summary with ChatGPT and Take Notes signs NoteGPT API requests from bundled extension credentials.

CovidDash at Johns Hopkins University replaces browser search, homepage, and startup settings with coviddashboard.extjourney.com.

Crawl date checker for Google sends the active tab URL to Google Web Cache when checking crawl status.

Cricket Score Bar inserts Cloudinary-hosted score images into every tab after a match is selected.

Cristiano Ronaldo Insane Jump Live Wallpaper inserts unsanitized remote popup HTML into its new-tab page.

Cronofy lets Gmail pages request the stored Cronofy scheduler auth token from the extension.

Cross - Compare Amazon Prices fetches regional Amazon product pages for the current product to compare prices.

Crossbeam Copilot sends visited domains and CRM account identifiers to Crossbeam APIs for overlap lookups.

CroxyProxy Free Web Proxy Lite sends URLs you choose to open through its proxy to CroxyProxy front servers.

Crunchyroll Bilingual Subtitles sends subtitle text to Google Translate when translation is enabled.

Crypto Price Checker sends currency conversion requests with an embedded RapidAPI key to a RapidAPI fixer endpoint.