Is Clipbox Tab safe?
Clipbox Tab is medium risk. Pressing Ctrl+C on any site, Clipbox Tab reads the selected text and page address, saving each new pair in Chrome's synced storage. Copied text from webmail, account pages, documents, or forms is kept with the page it came from.
Who publishes itGents LLC - no other listings under this identity
Gents LLC - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
Ctrl+C selections are saved with page URLs
Pressing Ctrl+C on any site, Clipbox Tab reads the selected text and page address, saving each new pair in Chrome's synced storage.
Copied text from webmail, account pages, documents, or forms is kept with the page it came from.
What actually happens
You copy selected text on a web page with Ctrl+C.
The page can be any site where the extension's content script runs.
The extension reads the selected text and saves it with the page URL.
It skips empty selections and duplicate text-and-URL pairs, then writes new entries to synced extension storage.
Fields saved for each copied selection
- Copied selectionQ3 renewal discount approved (illustrative)
This is the exact text you selected before pressing Ctrl+C. It can include text from messages, documents, account pages, or form fields.
- Source pagehttps://mail.example.com/inbox/18472 (illustrative)
This ties the copied text to the page where you selected it.
- Saved list entry[{"text":"Q3 renewal discount approved","url":"https://mail.example.com/inbox/18472"}] (illustrative)
Each new text-and-page pair is added to the front of a saved list, so older copied selections can remain in the extension's storage.
What's stored on your device
This synced record keeps copied page text together with the page address where you selected it.
- Location
- chrome.storage.sync key 'clipboard'
{ "clipboard": "[{\"text\":\"Q3 renewal discount approved (illustrative)\",\"url\":\"https://mail.example.com/inbox/18472 (illustrative)\"}]"}The code that does this
The copy-shortcut handler that writes the saved entry
Readable equivalent of the same handler
scripts/content-scripts.jsdocument.body.addEventListener("keydown", async function handleCopyShortcut(event) { event = event || window.event; var key = event.which || event.keyCode; var isCtrlPressed = event.ctrlKey ? event.ctrlKey : (key === 17 ? true : false); if (key == 67 && isCtrlPressed) { var selection = window.getSelection(); if (selection) { var selectedText = selection.toString().trim(); if (!selectedText) { return; } var savedClipboardEntry = { text: selectedText, url: window.location.href }; var alreadySaved = clipboard.some(function (item) { return item.text == savedClipboardEntry.text && item.url == savedClipboardEntry.url; }); if (!alreadySaved) { clipboard.unshift(savedClipboardEntry); chrome.storage.sync.set({ "clipboard": JSON.stringify(clipboard) }, function () { }); } } }}, false);The code that does this
The manifest runs the content script on every website
Readable equivalent of the manifest rule
manifest.jsoncontentScripts = [{ matches: ["<all_urls>"], js: ["scripts/content-scripts.js"]}];What it can do
Permissions this extension asks for, as declared in version 1.0.4. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Store data in your browser
storage