Is Grammarly: AI Writing and Grammar Checker App safe?

Low risk

Grammarly sends per-domain typing metrics to its own servers and routes behavioral events to the third-party marketing platform Iterable.

The extension tracks how long a user types on each website and how many characters they type, keyed to the domain name (e.g. mail.google.com). These metrics are sent hourly to extension.femetrics.grammarly.io. Separately, user interaction events — including a Grammarly-assigned user ID and campaign tracking data — are forwarded to api.iterable.com, a third-party marketing automation service.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Grammarlyv8.937.0Firefox Add-ons
20Risk
Who publishes it

Grammarly - no other listings under this identity, 27 shared hostnames

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Grammarly

Shared hosts - 27 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

dev.coda.io
Also called by 1 other listing: Superhuman Docs Browser Extension
head.coda.io
Also called by 1 other listing
staging.coda.io
Also called by 1 other listing: Superhuman Docs Browser Extension
superhuman.com
Also called by 1 other listing: Superhuman
auth.grammarly.com
Also called by 2 other listings: Push Security, Push Security
coda.grammarly.com
Also called by 2 other listings
codaio.imgix.net
Also called by 2 other listings
f-log-extension.grammarly.io
Also called by 2 other listings
id.pp-sh.io
Also called by 2 other listings
rwsgfy.grammarly.com
Also called by 2 other listings
s9c0bed5jyahoeew.public.blob.vercel-storage.com
Also called by 2 other listings
static.institution.grammarly.com
Also called by 2 other listings
api.iterable.com
Also called by 3 other listings
assets.grammarly.com
Also called by 3 other listings, including Grammarly, Superhuman Go: AI Assistant
assistant.femetrics.grammarly.io
Also called by 3 other listings, including Grammarly, Superhuman Go: AI Assistant
auth.ppgr.io
Also called by 3 other listings, including Grammarly, Superhuman Go: AI Assistant
auth.qagr.io
Also called by 3 other listings, including Grammarly, Superhuman Go: AI Assistant
config.extension.grammarly.com
Also called by 3 other listings
d201kpdrh73vuz.cloudfront.net
Also called by 3 other listings
extension.femetrics.grammarly.io
Also called by 3 other listings
f-log-assistant.grammarly.io
Also called by 3 other listings
f-log-inkwell.grammarly.io
Also called by 3 other listings
f-log.grammarly.io
Also called by 3 other listings
femetrics.ppgr.io
Also called by 3 other listings
femetrics.qagr.io
Also called by 3 other listings
id.qa-sh.io
Also called by 3 other listings
id.superhuman.com
Also called by 3 other listings

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 8.937.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    http://*/*

  • Read and change your data on every secure site you visit

    https://*/*

  • See the address and title of every tab you have open

    tabs

  • Show you desktop notifications

    notifications

  • Read and change cookies, including the ones that keep you signed in

    cookies

  • Sign you in with your Google account

    identity

  • Store data in your browser

    storage

Where it sends data

Destinations our analysis observed Grammarly: AI Writing and Grammar Checker App contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • api.iterable.com

    Grammarly: AI Writing and Grammar Checker App sends data to api.iterable.com. No other extension we have analyzed sends data here.

  • extension.femetrics.grammarly.io

    Grammarly: AI Writing and Grammar Checker App sends data to extension.femetrics.grammarly.io. No other extension we have analyzed sends data here.

Updated 2 November 2026amo-566314