Is Coursology safe?

Medium risk

Coursology sends selected text and tab screenshots to its AI API and stores user-uploaded files publicly on Vercel Blob storage.

When a user selects text or draws a screenshot region, the extension captures that content and transmits it to coursology.com for AI-assisted answers. User-uploaded documents are stored on Vercel Blob with public read access, meaning anyone with the URL can retrieve them. The extension bundle also contains a hardcoded Vercel Blob read-write API token that any user who inspects the source can extract.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Coursologyv1.2.6Chrome Web Store
40Risk
Who publishes it

Coursology LLC - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Coursology
Declared legal entity
Coursology LLC
Registered address
600 Broadway, Albany, NY 12207, US
Registered contact
Coursology

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed Coursology contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • blob.vercel-storage.com

    Coursology sends data to blob.vercel-storage.com. No other extension we have analysed sends data here.

  • coursology.com

    Coursology sends data to coursology.com. No other extension we have analysed sends data here.

Updated 30 September 2026ldgogjlogbecagpdpfomiiebiaeilgpd