Is ChatSearch: ChatGPT for Search Engine (GPT4) safe?

Medium risk

ChatSearch: ChatGPT for Search Engine (GPT4) logs search prompts with IP-derived fields and a UUID to Alibaba Cloud.

When it automatically sends supported search-page queries to ChatGPT, it also writes a chat log record containing the prompt, extension details, a persistent UUID, install time, and IP-derived user fields. The logged data is sent to an Alibaba Cloud Log Service endpoint at hawkeye-us.us-west-1.log.aliyuncs.com.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Mallory Tranv2.0.1Chrome Web Store
42Risk
Who publishes it

Mallory Tran - 2 other listings from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Mallory Tran

Same store account

2 other listings published from this account, 2k+ users between them, none of them carrying a finding.

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 2.0.1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    <all_urls>

  • Store data in your browser

    storage

Where it sends data

Destinations our analysis observed ChatSearch: ChatGPT for Search Engine (GPT4) contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • ipinfo.iowidely used

    ChatSearch: ChatGPT for Search Engine (GPT4) sends data to ipinfo.io. A widely used service: 45 other extensions we have analysed send data here.

  • hawkeye-us.us-west-1.log.aliyuncs.com

    ChatSearch: ChatGPT for Search Engine (GPT4) sends data to hawkeye-us.us-west-1.log.aliyuncs.com. 18 other extensions we have analysed send data here.

Updated 30 September 2026pkkmgcildaegadhngpjkklnbfbmhpdng