Is midjourney to notion safe?

Medium risk

midjourney to notion sends saved prompt details and subscriber identifiers to gpts-api.gpt-stores.com.

When you click the injected Save to Notion button, the extension collects the Midjourney or Discord prompt, prompt attributes, image or video URL, and current page URL. Before saving to Notion, its background script also packages that prompt data with the subscriber email, subscription status, save counters, language, and a persistent client ID, then sends it to gpts-api.gpt-stores.com as a telemetry payload.

aluov5.0.0Chrome Web Store
45Risk
Who publishes it

org - 6 other listings from the same operator, 2 of them carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
aluo
Declared legal entity
org
Registered address
xianganwanjiaonailuchengjie, 345num, 九龍, 香港 510000, CN
Registered contact
strongerzhou

Same store account

6 other listings published from this account, 14k+ users between them. 2 of them carry a finding.

Save ChatGPT to Notion8k+MediumChatGPT to Evernote2k+CleanEmail Hunter Pro1k+CleanAIExportHub: Bulk Export AI Chats1k+LowChatGPT Prompts Hub1k+CleanChatGPT to PDF - One-Click Export & Batch Save1k+Medium

Shared hosts - 3 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

payv2.chatgpt2notion.com
Also called by 7 other listings, including Save ChatGPT to Obsidian markdown file, Export Gemini AI Chats to PDF
cfnodeapi.chatgpt2notion.com
Also called by 8 other listings, including Perplexity to Notion - Batch Export, Export Gemini Chats to Notion
nodeapi.chatgpt2notion.com
Also called by 9 other listings, including Save ChatGPT to Obsidian markdown file, Claude to Obsidian & Markdown Export

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

Save-to-Notion prompts sent to gpt-stores telemetry endpoint

Clicking Save to Notion on Midjourney or Discord saves the prompt but also forwards the payload to gpts-api.gpt-stores.com, including page URL, prompt content and attributes, storage values, subscriber email, and a persistent client ID.

Severity
Medium unwanted
Type
Unexpected
CWE
CWE-359
Source
Dynamic sandbox
What actually happens
You did this

You click the Save to Notion button.

The extension did this

The extension saves the item to Notion and also sends the prompt payload, storage values, subscriber email, and persistent client ID to a gpt-stores telemetry endpoint.

Captured request
POSThttps://gpts-api.gpt-stores.com/gpts/testAbc123
Fields in the request
  • Current page URL
    https://discord.com/channels/123456789/987654321 (illustrative)

    Links the saved prompt action to the Midjourney or Discord page where it happened.

  • Prompt and page content
    prompt: a cinematic city street at night; imageUrl: https://cdn.discordapp.com/... (illustrative)

    Includes the prompt payload, attributes, and media URL collected for the Notion save action.

  • Stored subscriber data
    subscriber@example.com; clientId=8f4c2a91-... (illustrative)

    Adds saved extension values including subscriber email, subscription state, save counts, and a persistent client ID.

Where it sends data

Destinations our analysis observed midjourney to notion contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • gpts-api.gpt-stores.com

    midjourney to notion sends data to gpts-api.gpt-stores.com. No other extension we have analysed sends data here.

Updated 30 September 2026ceoifmkmbigkoodehbhfeegbngoomiae