Is GrabzIt Web Scraping Assistant safe?

GrabzIt Web Scraping Assistant sends the user's live GrabzIt account key to a third-party analytics service on popup errors.

The extension stores the account's application key, which is also the sole credential for the GrabzIt API, in browser storage. When an error occurs in the popup window, that key is forwarded to the background script and included as the distinct_id in an error-tracking event sent to PostHog, a third-party analytics processor separate from grabz.it. Background-originated errors instead use a generic anonymous identifier, so only popup crashes expose the account key this way.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.