Is ChatFlat: Chat with any flat of Idelista/AirBnB with AI safe?

Low risk

ChatFlat sends your chat messages and Idealista/Airbnb listing IDs to api.img2html.com under a stored account token.

The extension lets you chat with an AI about a flat listing; messages, the property ID and platform are sent to ChatFlat's servers with a bearer token saved in the extension. A content script on all sites relays a page-dispatched event into extension storage, so any web page can overwrite that stored token and make later chats run under a different account.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

img2htmlv1.0.1Chrome Web Store
15Risk
Who publishes it

img2html - 3 other listings from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
img2html

Same store account

3 other listings published from this account, 5k+ users between them, none of them carrying a finding.

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed ChatFlat: Chat with any flat of Idelista/AirBnB with AI contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • api.img2html.com

    ChatFlat: Chat with any flat of Idelista/AirBnB with AI sends data to api.img2html.com. One other extension we have analysed sends data here.

  • chatflatai.com

    ChatFlat: Chat with any flat of Idelista/AirBnB with AI sends data to chatflatai.com. No other extension we have analysed sends data here.

Updated 15 October 2026hclcfbmdmnjnknopclochghioacdgfkn