Is Bonusway safe?

Clean risk

Bonusway injects a cashback banner and routes purchases through its own affiliate-attribution link before forwarding you to the merchant.

When you visit a site in Bonusway's partner network, the extension injects a banner offering cashback and, when you click through, redirects your browser to a Bonusway 'waiting' page (tagged with your account ID and the store's campaign ID) before sending you on to the actual merchant. This is how the extension records that the purchase came through it so it can credit your cashback, and is core to how the affiliate/cashback feature works rather than a hidden redirect.

Bonuswayv9.0.3Chrome Web Store
2Risk
Who publishes it

Kopikot Russia Oy - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Bonusway
Declared legal entity
Kopikot Russia Oy
Registered address
Kalevankatu 30, Helsinki 00100, Finland
Registered contact
Ville Laitinen

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 9.0.3. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    http://*/*

  • Read and change your data on every secure site you visit

    https://*/*

  • Store data in your browser

    storage

  • Run its own code inside the pages you visit

    scripting

  • See the address and title of every tab you have open

    tabs

Where it sends data

Destinations our analysis observed Bonusway contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • www.bonusway.fi (and other bonusway.{cc} regional domains)

    Bonusway sends data to www.bonusway.fi (and other bonusway.{cc} regional domains). Named as a recipient in this extension's own analysis.