Is Permit Place safe?
Permit Place sends the active tab's URL and title to OpenAI to generate prompts, using a hardcoded vendor API key.
When you press Ctrl+Shift+G or use the popup, the extension sends the current tab's URL and title, or text you type into the popup, to OpenAI's chat completions API. The requests use an OpenAI project API key embedded in the extension's background script, which anyone who unpacks the extension can read. The page content script only extracts text when the popup asks it to.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itChapter One - no other listings under this identity
Chapter One - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed Permit Place contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- api.openai.comwidely used
Permit Place sends data to api.openai.com. A widely used service: 70 other extensions we have analysed send data here.