Is Boycat: Privacy VPN & Ethical Shopping safe?

Clean risk

Boycat checks visited website hostnames and Amazon product details against its Supabase APIs.

When a tab finishes loading an HTTP(S) page, the extension reduces the URL to a hostname or Amazon marketplace and ASIN before requesting a compliance scan. On Amazon pages it can also read product title, image URL, price, brand or byline fields, and marketplace, then sends that product metadata to its Supabase endpoint for campaign and brand lookups.

boycat-developersv4.0.1Chrome Web Store
0Risk
Who publishes it

boycat-developers - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
boycat-developers

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed Boycat: Privacy VPN & Ethical Shopping contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • tjqnayzkemnkjthmraae.supabase.co

    Boycat: Privacy VPN & Ethical Shopping sends data to tjqnayzkemnkjthmraae.supabase.co. No other extension we have analysed sends data here.

Updated 30 September 2026edkkcpojmipkpbiaiggldpoiefhnikmc