Is ChatGPT Prompt Assistant safe?

Medium risk

ChatGPT Prompt Assistant loads a Buy Me a Coffee image beacon on supported AI chat pages.

On supported AI chat sites, the extension starts an ad rotation shortly after loading and inserts a Buy Me a Coffee image from img.buymeacoffee.com. That image request can include the visited page URL or referrer and the user's IP address. The extension also stores user-authored prompt, quick reply, and super prompt settings in the page's localStorage on those AI sites.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

joeyou30140v2.0.0Chrome Web Store
40Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 2.0.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Store data in your browser

    storage

Where it sends data

Destinations our analysis observed ChatGPT Prompt Assistant contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • img.buymeacoffee.com

    ChatGPT Prompt Assistant sends data to img.buymeacoffee.com. One other extension we have analysed sends data here.

Updated 30 September 2026biohjdkjclhempinkjfnjenpldjnkcfn