Is CMDK - Read Receipts, Split Inbox, Hotkeys & Reminders for Gmail safe?
CMDK adds Gmail read receipts by inserting a tracking pixel and saving sent-message metadata.
When read receipts are enabled for a Gmail message, CMDK inserts a hidden image hosted on a Firebase Cloud Function with user, session, and receipt identifiers. It also watches Gmail send activity and stores receipt records containing the Gmail message and thread IDs, sender, subject, recipients, recipient count, and sent time in the extension's Firebase/Firestore project.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed CMDK - Read Receipts, Split Inbox, Hotkeys & Reminders for Gmail contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- firestore.googleapis.com
CMDK - Read Receipts, Split Inbox, Hotkeys & Reminders for Gmail sends data to firestore.googleapis.com. 16 other extensions we have analysed send data here.
- us-central1-simplehuman-5f002.cloudfunctions.net
CMDK - Read Receipts, Split Inbox, Hotkeys & Reminders for Gmail sends data to us-central1-simplehuman-5f002.cloudfunctions.net. No other extension we have analysed sends data here.