Is Chat GPT Side Bar MeaVana safe?

Medium risk

Chat GPT Side Bar MeaVana sends stored session tokens to PostHog during some expired-session logout flows.

When token refresh fails or both stored tokens are expired, the extension builds logout analytics context that includes the saved access and refresh token data. That logout event is captured through PostHog, so the telemetry sent to PostHog can contain MeaVana session credentials.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

MeaVanav1.8.4Chrome Web Store
40Risk
Who publishes it

Manifold Ventures LLC - 5 other listings from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
MeaVana
Declared legal entity
Manifold Ventures LLC
Registered address
848 N. Rainbow Blvd. #1848, Las Vegas, NV 89107, US
Registered contact
Shiv Dutt

Same operator - 5 listings

Published under a different store account, but sharing the registered address, contact or declared legal entity this one gave the store.

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed Chat GPT Side Bar MeaVana contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • us.posthog.com

    Chat GPT Side Bar MeaVana sends data to us.posthog.com. 5 other extensions we have analysed send data here.

Updated 30 September 2026dlmnpleglnonapdncpodpjoiiaiedpef