Is Reaction Exporter - Extract Like, Love, etc. safe?

Low risk

Reaction Exporter taps Facebook's GraphQL API to bulk-collect reactor/commenter names beyond the UI, for local CSV/XLSX export.

On facebook.com, the extension injects a script that overrides fetch and XMLHttpRequest to watch Facebook's GraphQL API, then drives Facebook's own reactors-dialog query using the logged-in session to page through the full list of people who reacted to or commented on a post — not just the small on-screen sample. The extracted names, profile URLs, and reaction types are collected locally and can be exported as a CSV or XLSX file. Separately, when a user first signs in with Google, the extension creates an account on its own backend (fb-reaction-api.convlead.com) and uses the Google account's numeric user ID as that account's password.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

hipolitoeverhardtxhiv1.3.0Chrome Web Store
15Risk
Who publishes it

hipolitoeverhardtxhi - 1 other listing from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
hipolitoeverhardtxhi

Same store account

1 other listing published from this account, 1k+ users between them, none of them carrying a finding.

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed Reaction Exporter - Extract Like, Love, etc. contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • fb-reaction-api.convlead.com

    Reaction Exporter - Extract Like, Love, etc. sends data to fb-reaction-api.convlead.com. No other extension we have analyzed sends data here.

Updated 30 September 2026cddgoecgoedcodpohjphbhfdhojlpfik