Is GamerPay extension safe?

Low risk

GamerPay extension lets allowed Steam and GamerPay pages use its bridge to read pending trades and send inventory data.

The extension accepts external messages from Steam Community and GamerPay pages and routes bridge requests through the user's signed-in GamerPay session. Those pages can request pending trade data for a supplied buyer Steam ID and can post caller-supplied inventory assets and descriptions to GamerPay.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Social Firstv1.0.13Chrome Web Store
15Risk
Who publishes it

Social First - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Social First
Declared legal entity
Social First
Registered address
Metsärinne 17, Kotka 48310, FI
Registered contact
Mikko Kähärä

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.0.13. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on steamcommunity.com

    *://*.steamcommunity.com/tradeoffer/new/* and 3 more

  • Read and change your data on gamerpay.gg

    *://*.gamerpay.gg/*

  • Read and change your data on localhost:3000

    *://*.localhost:3000/*

  • Run its own code inside the pages you visit

    scripting

Where it sends data

Destinations our analysis observed GamerPay extension contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • api.gamerpay.gg

    GamerPay extension sends data to api.gamerpay.gg. No other extension we have analysed sends data here.

Updated 30 September 2026fnandmgflecmebljkpkfoddhgbefiife