Is Marsello for Lightspeed X-Series / Vend safe?
Marsello for Lightspeed X-Series / Vend sends customer email and customer code to Marsello when rewards are checked.
On Vend and Lightspeed register pages, the extension injects a Check rewards button into the customer dialog. When that button is used, it reads the displayed customer email, customer code, site URL, site name, browser version, and extension version, then sends them to app.marsello.com to load the rewards popup.
Who publishes itMarsello - 1 other listing from the same operator, none carrying a finding
Marsello - 1 other listing from the same operator, none carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same operator - 1 listing
Published under a different store account, but sharing the registered address, contact or declared legal entity this one gave the store.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 2.3.9. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on marsello.com
https://*.marsello.com/*
Where it sends data
Destinations our analysis observed Marsello for Lightspeed X-Series / Vend contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- app.marsello.com
Marsello for Lightspeed X-Series / Vend sends data to app.marsello.com. No other extension we have analysed sends data here.