Is Floto: Design Feedback safe?
Floto captures screenshots and page data of your active tab and uploads them to its servers when you run an audit.
When you run a design diff or QA audit, the extension captures the visible tab, plus the page URL, title and DOM-derived content. It uploads these to Floto's backend under your signed-in Floto account. Analytics events are only sent when you are signed in.
Who publishes itFloto, Inc - no other listings under this identity, 1 shared hostname
Floto, Inc - no other listings under this identity, 1 shared hostname
What this publisher told the store about itself, and the other listings that told it the same thing.
Shared hosts - 1 hostname
Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed Floto: Design Feedback contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- app.floto.ai
Floto: Design Feedback sends data to app.floto.ai. No other extension we have analyzed sends data here.
- design-qa.api.floto.ai
Floto: Design Feedback sends data to design-qa.api.floto.ai. No other extension we have analyzed sends data here.