Is BetterCampus (prev. BetterCanvas) safe?
BetterCampus fetches remotely-controlled CSS rules and sends Canvas school URLs and email domains to PostHog analytics by default.
Every 15 minutes, BetterCampus downloads a configuration file from ext.bettercampus.com and applies CSS selector rules to all web pages the user visits. Separately, the extension sends analytics events — including the user's Canvas school URL and email domain — to PostHog servers; this telemetry is enabled by default and requires the user to opt out. The CSS selector field in the remotely-fetched rules is not validated, meaning a server-side change could target any element on any page.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itBetterCampus - 2 other listings from the same operator, none carrying a finding
BetterCampus - 2 other listings from the same operator, none carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
2 other listings published from this account, 1.1M+ users between them, none of them carrying a finding.
Shared hosts - 2 hostnames
Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed BetterCampus (prev. BetterCanvas) contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- us.i.posthog.com
BetterCampus (prev. BetterCanvas) sends data to us.i.posthog.com. 24 other extensions we have analysed send data here.
- ext.bettercampus.com
BetterCampus (prev. BetterCanvas) sends data to ext.bettercampus.com. No other extension we have analysed sends data here.