Is BetterFloat safe?

Clean risk

BetterFloat injects a page-level fetch/XHR interceptor into 26 skin-trading marketplaces and sends pro users' Steam IDs to its own server.

On the CS skin marketplaces it supports, BetterFloat runs a hook in the page's own JavaScript context that captures every API response the site loads, including authenticated account, inventory, and order data, and re-broadcasts the full response bodies as page-level events that any script on that site can read. For pro/VIP-tier users, the extension also attaches the user's 64-bit Steam ID to an x-steamid header on each price lookup sent to api.betterfloat.com, linking the Steam account to marketplace activity. Free users send an empty Steam ID and the interceptor only re-exposes data within the same site origin.

0Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Data recipients

api.betterfloat.com
Updated 17 September 2026bphfhlfhnohppnleaehnlfigkkccpglk