Is RetailMeNot: Codes, Cash Back and Coupons safe?
RetailMeNot: Codes, Cash Back and Coupons transmits full page DOM content from shopping and checkout pages to api.onsleek.ai via the Sleek SDK.
On allowlisted shopping sites, the extension captures the full DOM of product, cart, and checkout pages — including the page URL, title, and user agent — and sends this data to api.onsleek.ai endpoints for page classification, cart extraction, and coupon automation. The extension applies PII redaction regexes before sending, but transmits the serialized DOM string regardless. Its injected content script (f.js) also accepts postMessage commands from any parent frame without validating the message origin, exposing DOM capture and form-input operations to cross-origin callers.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itRetailMeNot - no other listings under this identity
RetailMeNot - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 5.0.7. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on every site you visit
<all_urls>
Read and change cookies, including the ones that keep you signed in
cookies
Run its own code inside the pages you visit
scripting
Store data in your browser
storage
See the address and title of every tab you have open
tabs
See every page you navigate to, as you navigate to it
webNavigation
Watch every request your browser makes
webRequest
Where it sends data
Destinations our analysis observed RetailMeNot: Codes, Cash Back and Coupons contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- api.onsleek.ai
RetailMeNot: Codes, Cash Back and Coupons sends data to api.onsleek.ai. 4 other extensions we have analyzed send data here.