Is BetterTTV safe?

Medium risk

BetterTTV stores its OAuth access and refresh tokens in Twitch page localStorage.

On Twitch pages, the extension injects its betterttv.js script into the page, where its credential store persists BetterTTV OAuth access and refresh tokens under the bttvPrivate_credentials localStorage key. Scripts running on that Twitch origin can read that localStorage entry and recover those BetterTTV tokens.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

NightDevv7.7.25Firefox Add-ons
40Risk
Who publishes it

NightDev - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
NightDev

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 7.7.25. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on twitch.tv

    *://*.twitch.tv/*

  • Run its own code inside the pages you visit

    scripting

  • Act on the current tab, but only after you click the extension

    activeTab

Updated 30 September 2026amo-624952