Is Disney+ ピクチャー・イン・ピクチャー [QVI] safe?

Low risk

Disney+ PiP reads your Disney+ account email, birth date and watch history and sends them to its own servers.

On Disney+ pages the extension uses your logged-in session token to read your account email, profile name, date of birth, gender and age, and sends them with a persistent extension ID to metricsmint.quest. It also turns on 'share insights' by default on install and uploads your continue-watching and viewing history, profile IDs, country and language to me3x.online, where a remote config chooses what is collected.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

TheBestChromeExtensionsv1.1.28Chrome Web Store
15Risk
Who publishes it

HideApp LLC - 37 other listings from the same operator, 2 of them carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
TheBestChromeExtensions
Declared legal entity
HideApp LLC

Shared hosts - 1 hostname

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

thebestchromeextensions.com
Also called by 6 other listings

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed Disney+ ピクチャー・イン・ピクチャー [QVI] contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • metricsmint.questwidely used

    Disney+ ピクチャー・イン・ピクチャー [QVI] sends data to metricsmint.quest. A widely used service: 60 other extensions we have analysed send data here.

  • me3x.onlinewidely used

    Disney+ ピクチャー・イン・ピクチャー [QVI] sends data to me3x.online. A widely used service: 58 other extensions we have analysed send data here.

Updated 15 October 2026gdeedlmbildjgnbmhdeadbokbdjpjkca