Is Clarity notes V2 safe?
Clarity notes V2 returns stored access and refresh tokens to its approved web and localhost origins.
On YouTube, it reads analytics_distinct_id from extension storage and embeds it in an app.claritynotes.io/extension iframe URL as ph_did, making the identifier visible in the page DOM. Its external message handler also returns stored access_token and refresh_token values for CHECK_AUTH messages from the manifest-approved Clarity, localhost, and ngrok origins.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed Clarity notes V2 contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- app.claritynotes.io
Clarity notes V2 sends data to app.claritynotes.io. No other extension we have analysed sends data here.
- fd1e-49-206-113-162.ngrok-free.app
Clarity notes V2 sends data to fd1e-49-206-113-162.ngrok-free.app. No other extension we have analysed sends data here.
- localhost:3010
Clarity notes V2 sends data to localhost:3010. Named as a recipient by 1 other extensions we have analysed.