Is Pause Gmail by cloudHQ safe?
Pause Gmail is medium risk. Loading Gmail makes the extension POST your address and the other signed-in Google accounts it finds to cloudhq.net. Observed during dynamic analysis.
Who publishes itcloudHQ LLC - 18 other listings from the same operator, 9 of them carrying a finding
cloudHQ LLC - 18 other listings from the same operator, 9 of them carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
18 other listings published from this account, 338k+ users between them. 9 of them carry a finding.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
Gmail Pause sends every Google account signed in to your browser to cloudHQ
Loading Gmail makes the extension POST your address and the other signed-in Google accounts it finds to cloudhq.net.
Observed during dynamic analysis.
What actually happens
You open Gmail in a profile where the precheck has not run recently.
The extension lists your signed-in Google accounts and sends them to cloudHQ.
The request goes to the vendor's own domain.
Captured request
Request observed during dynamic analysis; values redacted here.
email=<redacted>&email_or_login=<redacted>&email_switcher_list=<redacted>&chrome_extension_name=gmail_pause&switch_login=1Fields in the precheck request
- Your addressname@example.com (illustrative)
The Gmail address you are signed in with.
- Other accounts
Every other Google account signed in to this browser, up to 20.
- Extension namegmail_pause
Which cloudHQ extension sent the check.
Third-party destinations
- www.cloudhq.net
Vendor's own backend; the only destination the background fetch handler permits.
What it can do
Permissions this extension asks for, as declared in version 1.2.33. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on mail.google.com
https://mail.google.com/
Read and change your data on www.cloudhq.net
https://www.cloudhq.net/
Run its own code inside the pages you visit
scripting
Store data in your browser
storage
Keep running in the background while your browser is open
background
Change per-site browser settings such as cookies, JavaScript and camera access
contentSettings