Is Newsletter PDF Downloader - Export Substack, Medium, Beehiiv, Ghost to PDF safe?

Clean risk

Newsletter PDF Downloader sends the rendered article page and its URL to its own cloud backend to create a PDF.

When you click the injected download button on a supported newsletter site (Substack, Medium, Beehiiv, Ghost, Patreon), the extension sends the page's HTML, including paywalled content visible to you, and the page URL to the vendor's backend, along with a persistent random client ID. The backend returns a PDF, which the extension saves through the browser's downloads. It also checks a quota endpoint on the same service.

Neo Cortexv1.0.2Chrome Web Store
0Risk
Who publishes it

Neo Cortex LLC - 21 other listings from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Neo Cortex
Declared legal entity
Neo Cortex LLC

Shared hosts - 2 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

nmdgbflelkmbjonflhecblchpglckegk.chromiumapp.org
Also called by 1 other listing: Substack to PDF, Markdown, Text & JSON
cloud-api.yandex.net
Also called by 8 other listings

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed Newsletter PDF Downloader - Export Substack, Medium, Beehiiv, Ghost to PDF contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • newsletter-pdf-backend-all-in-one-52ii4dbiqa-pv.a.run.app

    Newsletter PDF Downloader - Export Substack, Medium, Beehiiv, Ghost to PDF sends data to newsletter-pdf-backend-all-in-one-52ii4dbiqa-pv.a.run.app. No other extension we have analysed sends data here.

Updated 15 October 2026ejlpjjmlalofjpdkdaeojjhihlommbdm