Is Conch AI safe?

Question

Is Conch AI safe?

Accepted Answer

Conch AI is medium risk. Conch AI initializes its Mixpanel analytics with two non-default flags: `ignore_dnt:true` overrides your browser's Do Not Track (DNT) setting, and `ip:true` instructs the server to record your IP address with every analytics event. All analytics traffic is routed through a DigitalOcean proxy server rather than standard Mixpanel endpoints. Our dynamic analysis captured 6 POST requests to this proxy, each including the `ip=1` URL parameter confirming server-side IP collection — and data was transmitted regardless of DNT setting. Neither behavior is disclosed in the Chrome Web Store listing.

Is Conch AI safe?

Findings