Is Extrovert safe?
Extrovert reads your LinkedIn session cookies (li_at and premium li_a) and sends them to its own vendor backend.
On command, Extrovert calls chrome.cookies.get to read the li_at session cookie and li_a premium token for www.linkedin.com, bundles them with your user agent and LinkedIn profile id, and POSTs them to prod-nginx-v2.goextrovert.com. The external-message allowlist that triggers this collection hardcodes http://localhost:3000 alongside the vendor's app origin, so web content served from localhost:3000 on your machine can also invoke the cookie-harvesting command.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed Extrovert contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- prod-nginx-v2.goextrovert.com
Extrovert sends data to prod-nginx-v2.goextrovert.com. No other extension we have analyzed sends data here.