Is Reverso – Translation, dictionary safe?
Reverso sends the current page URL, page title, and a persistent device UUID to its servers with every translation query.
Each time a user translates selected text, the extension POSTs the source text, the URL of the page where the text was selected, and the page title to context.reverso.net alongside a device identifier generated at install time and stored indefinitely. This allows Reverso to build a per-device log of browsing context tied to translation activity. The extension also bundles hardcoded API credentials for a machine-translation backend in plaintext.
Who publishes itReverso.net - no other listings under this identity, 16 shared hostnames
Reverso.net - no other listings under this identity, 16 shared hostnames
What this publisher told the store about itself, and the other listings that told it the same thing.
Shared hosts - 16 hostnames
Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
Translation requests send page URL, title, and device UUID to Reverso.
Translating selected text with Reverso sends the page URL, title, selected text context, and a persistent device UUID to context.reverso.net, linking the request to the page and to a device identifier the extension stores.
What actually happens
The user requests a translation for selected text on a page.
The extension posts the selected text, current page URL, page title, language direction, and persistent device UUID to Reverso.
Captured request
Fields in the translation request
- Current page URLhttps://example.com/article (illustrative)
Shows which page the user was viewing when the translation was requested.
- Page titleExample Article Title (illustrative)
Adds human-readable page context to the translation request.
- Persistent device UUIDd7f3a1b2-4c5d-6789-abcd-ef0123456789 (illustrative)
Links translation requests from the same browser installation over time.
What it can do
Permissions this extension asks for, as declared in version 2.2.205. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on every site you visit
<all_urls>
Read and change your data on reverso.net
https://*.reverso.net/* and 1 more
Read and change your data on google-analytics.com
https://*.google-analytics.com/*
Add items to the right-click menu
contextMenus
Show you desktop notifications
notifications
Watch every request your browser makes
webRequest
See the address and title of every tab you have open
tabs
Read and change cookies, including the ones that keep you signed in
cookies
Where it sends data
Destinations our analysis observed Reverso – Translation, dictionary contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- context.reverso.net
Reverso – Translation, dictionary sends data to context.reverso.net. One other extension we have analyzed sends data here.
- api.translation.ent.reverso.net
Reverso – Translation, dictionary sends data to api.translation.ent.reverso.net. No other extension we have analyzed sends data here.