Is Capital One Shopping: Save Now safe?

// notifications/injectors/apps/pageView.js — runs at document_start on <all_urls>chrome.runtime.sendMessage({ type: 'pageView', url: window.location.href, // full current URL referrer: document.referrer, // previous page URL title: document.title // page title}, e => { let { pageViewId, protect } = e; window.__wb_page_view_id = pageViewId; d({ pageViewId, protect });});

// bg/index.js, function sd() — called before every analytics POSTasync function sd() { let e = ti(); // UA parser result return await Iu() ? { // minimal context for mobile/WebView environments browser: _.get(e, 'browser'), locale: navigator.language } : { // full fingerprint for desktop Chrome browser: _.get(e, 'browser'), device: { model: _.get(e, 'device.model'), // e.g. 'Macintosh' type: _.get(e, 'device.type') || 'desktop', manufacturer: _.get(e, 'device.vendor'), // e.g. 'Apple' memory: String(navigator.deviceMemory), // RAM in GB concurrency: String(navigator.hardwareConcurrency) // CPU cores }, network: { downlink: String(navigator.connection.downlink), // Mbps effectiveType: String(navigator.connection.effectiveType), // '4g' rtt: String(navigator.connection.rtt) // ms }, locale: navigator.language, timezone: Intl.DateTimeFormat().resolvedOptions().timeZone, os: _.get(e, 'os'), screen: { width: screen.availWidth || screen.width, height: screen.availHeight || screen.height, density: window.devicePixelRatio } };}

// bg/index.js eJ() — loads the session tokenreturn new Promise(resolve =>  chrome.cookies.get(    { url: 'https://capitaloneshopping.com', name: 'wb_session' },    cookie => {      cookie && cookie.value        ? store.set('sessionToken', cookie.value)        : store.set('sessionToken', '');      resolve();    }  ));

// bg/index.js fetch wrapper — adds auth headers for Capital One domainsconst domain = getDomain(targetUrl);if (domain && domain.match(/capitaloneshopping\.com|ivf-stage\.com|ivaws\.com/)) {  headers['x-wb-extension'] = chrome.runtime.getManifest().version;  const token = store.get('sessionToken');  if (token) headers['x-wb-session'] = decodeURIComponent(token);}