Is Learnitab – Productivity Study New Tab, AI Form Solver, & StudyWithMe safe?

Low risk

Learnitab removes X-Frame-Options and CSP headers from every site's frames and sends selected page text to Groq and OpenRouter.

On install the extension registers a rule that strips X-Frame-Options and Content-Security-Policy response headers from all main-frame and sub-frame responses, so these protections are off across the user's browsing. Its AI study and form-assist features send text the user selects, and form or page content on sites such as Google Forms and LinkedIn, to Groq and OpenRouter. API keys for those services are embedded in the extension code.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Learnitabv4.7Chrome Web Store
17Risk
Who publishes it

Learnitab - 1 other listing from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Learnitab
Declared legal entity
Learnitab

Same store account

1 other listing published from this account, 266 users between them, none of them carrying a finding.

Shared hosts - 2 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

kbbi.kemdikbud.go.id
Also called by 1 other listing: Gramatika
pomofocus.io
Also called by 2 other listings, including WebBlock

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 4.7. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on openai.com

    https://*.openai.com/

  • Read and change your data on chatgpt.com

    https://*.chatgpt.com/

  • Read and change your data on google.com

    https://*.google.com/

  • Read and change your data on gemini.google.com

    https://gemini.google.com/*

  • Read and change your data on googleusercontent.com

    https://*.googleusercontent.com/

  • Read and change your data on open-meteo.com

    https://*.open-meteo.com/

  • Read and change your data on every site you visit

    <all_urls>

  • Store data in your browser

    storage

  • Act on the current tab, but only after you click the extension

    activeTab

  • Read your physical location

    geolocation

  • Add items to the right-click menu

    contextMenus

  • Run searches with your default search engine

    search

declarativeNetRequestWithHostAccess

Where it sends data

Destinations our analysis observed learnitab-%E2%80%93-productivity contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • openrouter.ai

    learnitab-%E2%80%93-productivity sends data to openrouter.ai. 12 other extensions we have analyzed send data here.

  • api.groq.com

    learnitab-%E2%80%93-productivity sends data to api.groq.com. 10 other extensions we have analyzed send data here.

Updated 2 November 2026gpfbhkcbpgghppecgkdnipkmnojaeblj