Is Grove - Get paid to create, anywhere. safe?
Grove sends the origin of every http(s) site you visit to api.grove.city to look up tip addresses.
Grove runs a content script on all http and https sites except a few excluded platforms. On generic sites it sends only the site's origin (host, not path or query) to Grove's tip-resolve API to find a tipping destination. The extension also accepts messages from any localhost page that can read or overwrite its stored Grove login token.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itGrove Redefines Our Very Existence Inc. - no other listings under this identity, 3 shared hostnames
Grove Redefines Our Very Existence Inc. - no other listings under this identity, 3 shared hostnames
What this publisher told the store about itself, and the other listings that told it the same thing.
Shared hosts - 3 hostnames
Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed Grove - Get paid to create, anywhere. contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- api.grove.city
Grove - Get paid to create, anywhere. sends data to api.grove.city. No other extension we have analysed sends data here.