Is PERRLA — APA & MLA Citation Generator for Research Papers safe?

Medium risk

PERRLA stores the user's account password in local browser extension storage after login.

When a user signs in, PERRLA sends the email and password to its token endpoint, then saves the API token, email, and password in chrome.storage.local. Its lookup bundle also includes API keys used to send target article or page URLs to Browserless and Elsevier during metadata and anti-bot lookups.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

PERRLA, LLCv1.1.413Chrome Web Store
40Risk
Who publishes it

PERRLA, LLC - no other listings under this identity, 1 shared hostname

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
PERRLA, LLC
Registered address
1042 Dunrobin Dr, Franklin, TN 37067-5699, US
Registered contact
Clifton Craig Batson

Shared hosts - 1 hostname

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

staging.onenr.io
Also called by 2 other listings, including GRIN

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed PERRLA — APA & MLA Citation Generator for Research Papers contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • api.elsevier.com

    PERRLA — APA & MLA Citation Generator for Research Papers sends data to api.elsevier.com. One other extension we have analysed sends data here.

  • chrome.browserless.io

    PERRLA — APA & MLA Citation Generator for Research Papers sends data to chrome.browserless.io. No other extension we have analysed sends data here.

Updated 30 September 2026ohnegglbceldemfpmmdfjmpmdgcgeffc