Is iGraal - Cashback & codes promo safe?

Low risk

iGraal forwards member ID, a persistent UUID, and merchant URLs to its servers on cashback clicks, and monitors all web requests site-wide.

When a user activates a cashback offer, the extension sends their member ID, a persistent random UUID, the merchant URL, campaign ID, and browser metadata to megatron.igraal.com. On search engine result pages (Google, Bing, Yahoo, Ecosia, Qwant), it reads destination URLs from search links every second to match merchants and injects cashback badges, sending retailer view events to Google Analytics. A separate listener monitors every HTTP and HTTPS request across all sites to detect affiliate link patterns for attribution; matched domains are stored locally with no remote call at detection time.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

iGraalv10.1.6Firefox Add-ons
20Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Data recipients

megatron.igraal.comcaa-configurations.gsg-extension.comwww.google-analytics.com
Updated 17 September 2026amo-10994