Is Language Reactor safe?

Medium risk

Language Reactor sends YouTube and Netflix viewing metadata and subtitle transcripts to api.dioco.io on every page load.

When you watch a YouTube video or Netflix title, the extension automatically collects metadata — including title, channel, view count, keywords, and related videos — along with the full subtitle transcript text and forwards it to api.dioco.io. This transmission happens without user interaction, triggered by page navigation. The extension also proxies requests to a local Anki Connect server (localhost:8765) from content scripts on YouTube, Netflix, and languagereactor.com, allowing caller-supplied commands to reach the local Anki installation.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Diocov5.1.8Chrome Web Store
45Risk
Who publishes it

Dioco - no other listings under this identity, 5 shared hostnames

What this publisher told the store about itself, and the other listings that told it the same thing.

Shared hosts - 5 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

forum.languagelearningwithnetflix.com
Also called by 1 other listing: Language Reactor sacrosanctx
us-central1-nlle-b0128.cloudfunctions.net
Also called by 1 other listing: Language Reactor sacrosanctx
api-cdn.dioco.io
Also called by 2 other listings: Language Reactor sacrosanctx, FluentAI: Dual Subtitles for Netflix & more
api.dioco.io
Also called by 2 other listings: Language Reactor sacrosanctx, FluentAI: Dual Subtitles for Netflix & more
languagereactor.com
Also called by 4 other listings, including CWS: Chinese Dictionary + Pinyin Annotator

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed Lang Reactor contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • api.dioco.io

    Lang Reactor sends data to api.dioco.io. No other extension we have analysed sends data here.

Updated 30 September 2026hoombieeljmmljlkjmnheibnpciblicm