Is Brain MAX: One AI for Any Page - Chat, Search & Work with ClickUp AI safe?
ClickUp BrainMax sends the user's real IP address, country, OS, and a device UUID to the Singular attribution SDK on install and on each login.
When the extension installs, it resolves the user's real IP and country via ip-api.com, then transmits those values along with the OS type, extension version, a persistent device UUID, and a Singular SDK key to s2s.singular.net. On subsequent login or signup events, the same data is sent again together with the user's ClickUp account ID. The device UUID is generated on first install and stored persistently in chrome.storage.local.
Who publishes itMango Technologies - 1 other listing from the same operator, none carrying a finding
Mango Technologies - 1 other listing from the same operator, none carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
1 other listing published from this account, 200k+ users between them, none of them carrying a finding.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
Brain MAX sends your real IP address and a device ID to Singular on install
On install, Brain MAX looks up your real IP address and country, then sends them with a persistent device ID to Singular's attribution servers.
The same ID and IP go again when you log in.
You install Brain MAX from the Chrome Web Store.
The background worker looks up your real IP address, then sends it with a persistent device ID to Singular's attribution servers.
This happens automatically, before you interact with the extension.
| Field | Value | Why it matters | |
|---|---|---|---|
Your public IP address | 187.40.254.11 | Resolved by querying ip-api.com and forwarded to Singular so it can map your location. | |
Your country | GB | Derived from the IP lookup and sent alongside it. | |
Device ID | ext-9b824e9b-dcd4-4a1c-812a-7b1b856f3a7d | A UUID generated on first install and stored permanently, letting Singular recognize this browser across sessions. | |
Operating system | linux | Reported so the attribution vendor can filter results by platform. | |
Extension version | 0.110.0.2 | Included so the vendor can track behavior by release. | |
Install source | chromestore | Marks the install as originating from the Chrome Web Store. |
| When | You did | Extension did |
|---|---|---|
| on install | user You install or update Brain MAX. | service_worker The background worker resolves your IP and sends it with a device ID to Singular's launch endpoint. |
| on login/signup | user You log in or sign up inside Brain MAX. | service_worker The worker sends the same device ID and IP again, plus your ClickUp user ID, to Singular's event endpoint. |
- ip-api.com
Free IP geolocation lookup service; resolves the extension's outbound IP to a country code before it is forwarded to Singular.
- s2s.singular.net
Server-to-server endpoint for Singular, a mobile/web attribution SDK ClickUp uses to measure install and login events.
Where it sends data
Destinations our analysis observed Brain MAX: One AI for Any Page - Chat, Search & Work with ClickUp AI contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- ip-api.comwidely used
Brain MAX: One AI for Any Page - Chat, Search & Work with ClickUp AI sends data to ip-api.com. A widely used service: 62 other extensions we have analysed send data here.
- s2s.singular.net
Brain MAX: One AI for Any Page - Chat, Search & Work with ClickUp AI sends data to s2s.singular.net. No other extension we have analysed sends data here.