Is 포인트백 for ADPICK safe?

function StartAdpickShopping(){	// Runs on every page load (content_scripts matches <all_urls>) once the	// user has an ADPICK login cookie or a stored affiliate ID.	var apCurrentUrl = window.location.href;          // full URL of the page you're on	var apCurrentDomain = window.location.hostname;	apCurrentDomain = apCurrentDomain.replace(/^www\./,'');	// Skip domains that were already checked recently (cache key per domain).	getAdpickLocalData("apMall_"+apCurrentDomain,function(val){		if(val=="nopartner"){			// Cached "not a partner" result (valid 24h) - no request sent.		}else if(val=="applied"){			// Cached "already applied" result (valid 60min) - no request sent.		}else{			// No cached decision for this domain yet: build the ADPICK request,			// carrying the current page URL and the account/affiliate ID.			var apiUrl="https://adpick.co.kr/extentions/GetShoppingLink.php?md=mall&apHash="+adpickHash+"&apAffid="+adpickAffid+"&url="+encodeURIComponent(apCurrentUrl);			// Ask the background service worker to fetch it (content scripts			// can't make this cross-origin request directly).			chrome.runtime.sendMessage({ type: "fetchData", url:apiUrl }, (data) => {				if(typeof data.affid!=="undefined"){                    adpickAffid=data.affid;                    setAdpickLocalData("apAffid",data.affid,60*24*365); // cache 1 year                }                if(data.status=="pass"){                    // no action                }else if(data.status=="aleady"){                    // affiliate link already applied for this domain                    setAdpickLocalData("apMall_"+apCurrentDomain,"applied",60);                }else if(data.status==true){                    // domain IS an ADPICK partner: cache it, then redirect the                    // current tab through the returned affiliate tracking link                    setAdpickLocalData("apMall_"+apCurrentDomain,"applied",60);                    location.replace(data.trackinglink);                }else{                    // domain is NOT a partner: cache that for 24h                    setAdpickLocalData("apMall_"+apCurrentDomain,"nopartner",60*24);                }			});		}	});}

chrome.runtime.onMessage.addListener(function(request, sender, sendResponse) {	if (request.type == "getAdpickLogin") {		// Reads the ADPICK login cookie to decide whether tracking should run.		chrome.cookies.get({"url": "https://www.adpick.co.kr", "name": "PODGATE_D1"}, function(cookie) {			sendResponse(cookie);		});		return true;	}	if (request.type === "fetchData") {		// Performs the actual outbound request on the content script's behalf,		// using whatever URL content.js constructed (the current page's URL).		fetch(request.url)		.then((response) => response.json())		.then((data) => sendResponse(data))		.catch((error) => console.log("ap Fetch error:", error));		return true;	}});