Is ChatGPT Assistant Plus safe?

Low risk

ChatGPT Assistant Plus sends a persistent UUID to Google Analytics hourly and silently opens chatgpt.com tabs to refresh session tokens.

On installation and every 60 minutes, the extension transmits a stored client UUID and session identifier to Google Analytics without disclosing this to the user. When the ChatGPT session token expires, the extension creates a background tab to chatgpt.com, waits 10 seconds, then closes it automatically — allowing the site to renew the session cookie without visible user interaction.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Merl Bradfordv1.0.8Chrome Web Store
17Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.0.8. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    <all_urls>

  • Run its own code inside the pages you visit

    scripting

  • Add items to the right-click menu

    contextMenus

  • Store data in your browser

    storage

  • Schedule its own background tasks

    alarms

  • Block and redirect the requests your browser makes

    declarativeNetRequest

Where it sends data

Destinations our analysis observed ChatGPT Assistant Plus contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • www.google-analytics.comwidely used

    ChatGPT Assistant Plus sends data to www.google-analytics.com. A widely used service: 388 other extensions we have analyzed send data here.

  • chatgpt.comwidely used

    ChatGPT Assistant Plus sends data to chatgpt.com. A widely used service: 44 other extensions we have analyzed send data here.

Updated 30 September 2026hhclmnigoigikdgiflfihpkglefbaaoa