Is Bitly | Short links and QR Codes safe?

Clean risk

Bitly sends the current tab or selected link URL to its API when you create a short link.

When you open the popup, the extension reads the active tab URL so it can prefill the destination for a new Bitly link. If you create a link manually or use the right-click shorten action, it sends that URL to Bitly's shorten API along with account settings such as the domain and group.

Bitlyv4.5.0Firefox Add-ons
0Risk
Who publishes it

Bitly - no other listings under this identity, 4 shared hostnames

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Bitly
Website

Shared hosts - 4 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

api-ssl.bitly.net
Also called by 1 other listing: Bitly
bitly.net
Also called by 1 other listing: Bitly
support.bitly.com
Also called by 1 other listing: Bitly
app.bitly.com
Also called by 5 other listings, including Bitly, Copy ShortURL

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 4.5.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on api-ssl.bitly.com

    https://api-ssl.bitly.com/

  • Read and change your data on api-ssl.bitly.net

    https://api-ssl.bitly.net/

  • Act on the current tab, but only after you click the extension

    activeTab

  • Write to your clipboard

    clipboardWrite

  • Store data in your browser

    storage

  • Add items to the right-click menu

    contextMenus

Where it sends data

Destinations our analysis observed Bitly | Short links and QR Codes contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • api-ssl.bitly.com

    Bitly | Short links and QR Codes sends data to api-ssl.bitly.com. 6 other extensions we have analysed send data here.

Updated 30 September 2026amo-872085