Is GPT Extension safe?

Clean risk

GPT Extension sends new-tab chat prompts, conversation history, and an Aeris ID to chatgpt-extension.com.

When you use the new-tab AI assistant, the extension posts your current message plus saved conversation context to chatgpt-extension.com/api/chat. The request includes a locally stored Aeris identifier in the X-Aeris-Id header and browser credentials for that site.

Syndic8v1.0Chrome Web Store
0Risk
Who publishes it

Syndic8 Asia Pte Ltd - 5 other listings from the same operator, 3 of them carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Syndic8
Declared legal entity
Syndic8 Asia Pte Ltd
Registered address
410 North Bridge Road, Singapore 188726, Singapore

Same store account

5 other listings published from this account, 190k+ users between them. 3 of them carry a finding.

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on api.open-meteo.com

    https://api.open-meteo.com/*

  • Read and change your data on chatgpt-extension.com

    https://chatgpt-extension.com/*

  • Store data in your browser

    storage

  • Read your physical location

    geolocation

Where it sends data

Destinations our analysis observed GPT Extension contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • chatgpt-extension.com

    GPT Extension sends data to chatgpt-extension.com. No other extension we have analysed sends data here.

Updated 30 September 2026loochcbbhdmhhkacjhfdbgoknblamkfb