Is LibKey Nomad safe?

Low risk

LibKey Nomad assigns a persistent device UUID and transmits it alongside browser details to a.thirdiron.com on every article interaction.

Each time the extension detects an academic article, it fires analytics events — such as NomadArticleLinkPresented and NomadButtonInteraction — that include a device UUID stored in local storage, the full user-agent string, OS version, browser version, and app version. These are POSTed as JSON to https://a.thirdiron.com/events using a hardcoded authentication token. Because the UUID persists across sessions, ThirdIron can build a cross-site activity history tied to a stable device identifier.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Third Iron LLCv1.57.0Firefox Add-ons
20Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Data recipients

a.thirdiron.com
Updated 17 September 2026amo-2654798