Is Astronomy Picture of the Day APOD by The Trav safe?

Clean risk

Astronomy Picture of the Day APOD sends Chrome top-sites URLs to Google's favicon service on new tabs.

When its custom new-tab page opens, the extension reads Chrome's top-sites list and creates Google favicon image requests for each saved site. Those requests include each top-site URL in the query string and use cleartext HTTP unless the user disables the top-sites setting.

travis.lawrence12v4.1.4Chrome Web Store
0Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 4.1.4. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on api.nasa.gov

    https://api.nasa.gov/*

  • Read the sites you visit most

    topSites

  • Store data in your browser

    storage

Where it sends data

Destinations our analysis observed APOD by The Trav contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • www.google.comwidely used

    APOD by The Trav sends data to www.google.com. A widely used service: 153 other extensions we have analysed send data here.

Updated 30 September 2026aedpginojmhafbemcoelnppdcmlfjcdj