Is Blackfy safe?

// Resolves true only when the stored consent flag is set.function hasUserConsented() {  return new Promise(resolve => {    chrome.storage.local.get(["userConsent"], (result) => {      resolve(result.userConsent === true);    });  });}// Downloads the current domain -> affiliate-URL map from the Google Sheet// and replaces the in-memory table the redirect listener reads from.async function fetchAffiliateLinks() {  try {    const response = await fetch(SHEET_URL, { cache: "no-store" });    if (!response.ok) throw new Error("Sheet fetch failed");    const text = await response.text();    // Simple CSV: domain, url    const rows = text.split("\n").map(row => row.split(","));    const updatedLinks = {};    rows.forEach((row, index) => {      if (index === 0) return; // header row      let rawDomain = row[0]?.trim().toLowerCase().replace(/"/g, "");      if (!rawDomain) return;      let cleanDomain = rawDomain.replace(/^www\./, "").replace(/\s+/g, "");      let affiliateUrl = row[1]?.trim().replace(/"/g, "");      if (!affiliateUrl) return;      if (!/^https?:\/\//i.test(affiliateUrl)) {        affiliateUrl = "https://" + affiliateUrl;      }      updatedLinks[cleanDomain] = affiliateUrl;   // e.g. "booking.com" -> "https://cutt.ly/crRorz3y"    });    affiliateLinks = updatedLinks;  } catch (e) {    // no error is surfaced if the fetch or parse fails  }}

// Fires on every navigation that finishes loading in any tab.chrome.tabs.onUpdated.addListener(async (tabId, changeInfo, tab) => {  if (changeInfo.status !== "complete" || !tab?.url) return;  const userConsented = await hasUserConsented();  if (!userConsented) return;  let urlObj;  try {    urlObj = new URL(tab.url);  } catch {    return;  }  // Looks up the finished tab's own hostname in the remotely-fetched map.  const domain = urlObj.hostname.toLowerCase().replace(/^www\./, "").replace(/\s+/g, "");  const target = affiliateLinks[domain];  if (target) {    // Only redirects once per domain per browser session.    if (redirectedDomains.has(domain)) return;    redirectedDomains.add(domain);    chrome.storage.session.set({ redirected: Array.from(redirectedDomains) });    // Replaces the whole tab URL, not just a query parameter.    chrome.tabs.update(tabId, { url: target }, () => {});  }});