Is Darkly - Dark Mode safe?

Low risk

Darkly redirects your tab to the developer's referral links when you visit Amazon, PayPal, Rakuten and other sites.

On visiting about a dozen shopping, cashback and VPN sites, a content script replaces the page address with a fixed affiliate link, at most once every 24 hours per site. This is not mentioned in the store description. The code does not send page URLs or page content anywhere.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

ITW Creative Worksv1.0.4Chrome Web Store
15Risk
Who publishes it

ITW Creative Works - 4 other listings from the same operator, 1 of them carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
ITW Creative Works
Declared legal entity
ITW Creative Works

Same store account

4 other listings published from this account, 2k+ users between them. 1 of them carries a finding.

Shared hosts - 2 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

lolli.com
Also called by 1 other listing: Lolli
ref.nordvpn.com
Also called by 3 other listings, including NordVPN, NordVPN - a VPN proxy extension for Firefox

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed Darkly - Dark Mode contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • www.coupert.com

    Darkly - Dark Mode sends data to www.coupert.com. 9 other extensions we have analysed send data here.

  • capitaloneshopping.com

    Darkly - Dark Mode sends data to capitaloneshopping.com. 4 other extensions we have analysed send data here.

  • www.rakuten.com

    Darkly - Dark Mode sends data to www.rakuten.com. 4 other extensions we have analysed send data here.

  • giftly.app

    Darkly - Dark Mode sends data to giftly.app. 3 other extensions we have analysed send data here.

  • r.honeygain.me

    Darkly - Dark Mode sends data to r.honeygain.me. 3 other extensions we have analysed send data here.

  • ref.nordvpn.com

    Darkly - Dark Mode sends data to ref.nordvpn.com. 3 other extensions we have analysed send data here.

  • www.joinhoney.com

    Darkly - Dark Mode sends data to www.joinhoney.com. 3 other extensions we have analysed send data here.

  • py.pl

    Darkly - Dark Mode sends data to py.pl. 2 other extensions we have analysed send data here.

  • lolli.com

    Darkly - Dark Mode sends data to lolli.com. One other extension we have analysed sends data here.

  • pawns.app

    Darkly - Dark Mode sends data to pawns.app. One other extension we have analysed sends data here.

  • upside.app.link

    Darkly - Dark Mode sends data to upside.app.link. One other extension we have analysed sends data here.

Updated 15 October 2026hibgeeloamicclmabgnfonelikdpioll