Is ManipulationDetect safe?
Clean risk
ManipulationDetect sends a full-page screenshot to its own backend and a third-party LLM when you run a scan.
When the user clicks 'Scan', the extension captures a full-page screenshot by stitching together multiple chrome.tabs.captureVisibleTab() shots, then sends the image to the vendor's Cloudflare Worker backend, which forwards it to a Google Gemini-based API for dark-pattern analysis. The vendor's own privacy notice discloses that scan payloads and a random user ID are retained for up to 10 years for research, and users can request deletion.
0Risk
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Data recipients
manipulationdetect.nudgedetect-api.workers.devGoogle Gemini API (via vendor backend)