Is Basket safe?

Low risk

Basket records page-load, unload, and click telemetry on server-selected sites and sends it to its API.

Basket runs a content script across HTTP and HTTPS pages, then uses a remotely fetched allowlist to decide which sites to track. On allowed sites it records page URLs, browser context, load timing, and clicked element details including most clicked element HTML, then batches those events with a user or device identifier to its API.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

19Risk
Who publishes it

Intent Technologies Ltd - 2 other listings from the same operator, 1 of them carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Declared legal entity
Intent Technologies Ltd
Registered address
20-22 Wenlock Road, London N1 7GU, GB
Registered contact
Alexi Deak

Same operator - 2 listings

Published under a different store account, but sharing the registered address, contact or declared legal entity this one gave the store.

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 3.2.8. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    http://*/* and 1 more

  • Read and change your data on every secure site you visit

    https://*/*

  • Act on the current tab, but only after you click the extension

    activeTab

  • See the address and title of every tab you have open

    tabs

  • Store data in your browser

    storage

  • Add items to the right-click menu

    contextMenus

  • Schedule its own background tasks

    alarms

  • Watch every request your browser makes

    webRequest

  • Run its own code inside the pages you visit

    scripting

Where it sends data

Destinations our analysis observed Basket contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • o4yipfz4w0.execute-api.eu-west-2.amazonaws.com

    Basket sends data to o4yipfz4w0.execute-api.eu-west-2.amazonaws.com. No other extension we have analysed sends data here.

Updated 30 September 2026hjpbnkkeihnknafkdbglklgmblkgdkki