Is Picture in Picture - floating video player safe?

Low risk

Picture in Picture - floating video player lets users watch videos in a floating window and injects a phantom pageview into the host page's Google Analytics queue on activation.

The extension adds a floating picture-in-picture mode for videos on any webpage. When a user activates PiP on a video, the extension's content script calls into the host page's legacy Google Analytics (_gaq) queue and submits a fake pageview hit to that site's analytics property. This only affects pages that use the older Google Analytics Classic (ga.js) library and does not send data to the extension's own servers.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

PiP Extensionsv1.0.6Chrome Web Store
20Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.0.6. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    <all_urls>

  • Run its own code inside the pages you visit

    scripting

  • Store data in your browser

    storage

Updated 30 September 2026gmehookibnphigonphocphhcepbijeen