Is BeeLine Reader safe?

Medium risk

BeeLine Reader sends the full URL of each active page to Google Analytics via a tracking pixel for free and trial users.

When BeeLine Reader applies its color-gradient text formatting on a page, it calls a Google Analytics tracking pixel that includes the full page URL — path and query string included — as a UTM parameter. This occurs for users on free or trial accounts each time the extension activates, and also on error events and user interactions such as blacklist toggles. Paid users are not subject to this tracking call.

BeeLine Readerv3.2.8Chrome Web Store
45Risk
Who publishes it

BeeLine Reader, Inc. - 1 other listing from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
BeeLine Reader
Declared legal entity
BeeLine Reader, Inc.
Registered address
9 Bishop Lane, Menlo Park, CA 94025, US
Registered contact
Nicholas Lum

Same store account

1 other listing published from this account, 1k+ users between them, none of them carrying a finding.

Shared hosts - 2 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

esquire.com
Also called by 3 other listings, including NCapture
roughtype.com
Also called by 3 other listings, including NCapture

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

BeeLine sends the current page URL to Google Analytics on page coloring.

MediumunwantedCWE-359Dynamic sandbox

BeeLine Reader sends the full page URL to Google Analytics when it auto-colors text for free or trial users.

What actually happens

You did this

You navigate to a page where BeeLine Reader automatically activates.

The extension did this

BeeLine Reader sends the current page URL to Google Analytics through a tracking pixel request.

Captured request

GETwww.google-analytics.com/__utm.gif

Fields in the request

  • Your browsing URL
    https://www.example.com/

    This identifies the page being viewed, including the page path and any query string present in the URL.

Observation

Dynamic analysis confirmed a Google Analytics request carrying the page URL in the utmr parameter.

Where it sends data

Destinations our analysis observed BeeLine Reader contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • www.google-analytics.comwidely used

    BeeLine Reader sends data to www.google-analytics.com. A widely used service: 388 other extensions we have analyzed send data here.

Updated 30 September 2026ifjafammaookpiajfbedmacfldaiamgg