Is Post and Search safe?

Low risk

Post and Search sends each new-tab top-site hostname to Google's favicon service.

When its replacement new tab page renders, Post and Search reads Chrome's top-sites list and creates Google favicon image requests for each entry. Those requests include each top-site hostname in the domain_url parameter, but not full page paths or page contents.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

DECATON MEDIA LTDv1.3.0Chrome Web Store
15Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.3.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on api.openweathermap.org

    https://api.openweathermap.org/data/2.5/*

  • Store data in your browser

    storage

  • Read your physical location

    geolocation

  • Read the sites you visit most

    topSites

Where it sends data

Destinations our analysis observed Post and Search contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • www.google.comwidely used

    Post and Search sends data to www.google.com. A widely used service: 153 other extensions we have analysed send data here.

Updated 30 September 2026bafodoggphpfleoconpidjbljeaahjkj