Is Rabattcorner safe?

Clean risk

Rabattcorner places cookie-derived cashback state in a page-visible iframe URL on matched merchant sites.

On matched merchant pages, Rabattcorner reads its own website_url and cashback_tracking cookies and includes those values in data passed to an injected iframe URL. Because the iframe is inserted into the page DOM, scripts running on that merchant page can read the iframe src and parse the cookie-derived state.

chrome-webstore-adminsv3.1.4Chrome Web Store
3Risk
Who publishes it

Rabattcorner AG - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
chrome-webstore-admins
Declared legal entity
Rabattcorner AG
Registered address
Lessingstrasse 11, Zürich 8002, CH
Registered contact
Rabattcorner

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 3.1.4. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every secure site you visit

    https://*/*

  • See the address and title of every tab you have open

    tabs

  • Store data in your browser

    storage

  • See every page you navigate to, as you navigate to it

    webNavigation

  • Read and change cookies, including the ones that keep you signed in

    cookies

  • Schedule its own background tasks

    alarms

Updated 30 September 2026ihplgdgihkkniiddfjgdamnallecjkja