Is Billy Button safe?
Billy Button records visited URLs and scrapes order history from about 70 retailers for logged-in members.
For logged-in members who have not opted out, the extension queues the URLs of visited shopping sites and injects scripts that read order IDs, dates, totals, product names, prices and quantities from order and checkout pages. This data is sent in batches with the member ID to an AWS Kinesis Firehose stream whose credentials come from the vendor's API. The page list and selectors are fetched from a vendor CDN, and the extension also reads affiliate network cookies to decide whether to activate cashback links.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed Billy Button contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- ucontent.prdg.io
Billy Button sends data to ucontent.prdg.io. 5 other extensions we have analysed send data here.
- api.inboxdollars.com
Billy Button sends data to api.inboxdollars.com. One other extension we have analysed sends data here.
- AWS Kinesis Firehose (Prodege)
Billy Button sends data to AWS Kinesis Firehose (Prodege). Named as a recipient by 1 other extensions we have analysed.