Is FlareGet Integration safe?
FlareGet Integration captures session cookies and POST form data from all sites and forwards them to the local FlareGet download manager.
When the extension detects a download (a response over 300 KB or with a binary content-type), it collects the triggering request's URL, referrer, user-agent, cookies, and any form data submitted, then sends that bundle to the native FlareGet application via native messaging. The cookie capture covers all XHR requests across every site, not just the download request itself, so session tokens from background XHR calls are included. Additionally, every YouTube page load causes the extension to immediately report the video URL and ID to FlareGet before any download action is taken.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 2.50. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on every site you visit
<all_urls>
Watch every request your browser makes
webRequest
Watch, block and rewrite every request your browser makes
webRequestBlocking
Talk to a program installed on your computer, outside the browser's sandbox
nativeMessaging
Where it sends data
Destinations our analysis observed FlareGet Integration contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- com.flareget.flareget (local native app)
FlareGet Integration sends data to com.flareget.flareget (local native app). Named as a recipient in this extension's own analysis.