Is CCH® Browser Search safe?

CCH® Browser Search transmits search queries and a user identifier to cchconnect.cch.com on every Google, Bing, and Google Scholar search.

On each search engine page load, the extension sends the user's search term, a userGuid, product ID, jurisdiction, and the parent page URL to cchconnect.cch.com via an injected iframe. The extension also registers a postMessage listener on those pages without restricting the allowed origin, so any script running in the same browsing context can send messages that overwrite the stored userGuid and jurisdiction in extension storage.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.