Low risk browser extensions

Notes Online sends a persistent user ID and note count to Mixpanel when the extension starts.

Online Piano can send extension-page session usage telemetry to accounts.api.extensions.ee.

Opinew Shopify Reviews Importer sends Shopify shop owner details to Segment analytics from supported pages.

Our Mouse Gesture lets page-dispatched mouse events trigger tab, window, and history actions through the extension.

Ozon Stats imports its popup font stylesheet from Google Fonts when the popup opens.

PDF Bookmark scans page HTML for a hardcoded keyword and stores matching page URLs with match counts in memory.

PDFAid loads Google-hosted fonts from its popup, causing requests to Google font domains when the popup opens.

PaperDebugger sends Overleaf page URLs and hashed page titles to Google Analytics when its page script initializes.

PasswordPocket accepts web-page messages that can save page-supplied credentials while the extension is unlocked.

Payscore lets any web page send a logout message that clears saved extension auth state.

Pinterest Dark Theme loads remote Google Fonts and cdnjs stylesheets when you open its popup.

Pogline fetches site-wide request and page-modification rules from pogline.com.

Post and Search sends each new-tab top-site hostname to Google's favicon service.

Pretty HTML | CSS | XML loads links and banners from linangdata.com into its popup and opens them in new tabs.

Productor for Spreadshirt sends bundled Basic Auth credentials to Productor trademark search API endpoints.

Proview proctoring sends each visited top-level site origin to Proview before applying LMS gating.

Pusheen Cat Wallpapers HD New Tab - Cute Kawaii Backgrounds sends saved shortcut URLs to Google's favicon service.

QuickGo lets any web page read and overwrite its redirect rules through a broad message bridge.

QuizCards: German sends local flashcard progress counts to Google Chart API when the stats view is opened.

Qwen removes framing protections from qwen.ai pages so they can load inside frames while the extension is installed.

Real Madrid wallpaper sends your browser's location coordinates to OpenWeatherMap for its new-tab weather widget.

Roblox Den sends code-related search terms, clicked result URLs, and competitor-page URLs to remote services.

Safeshop sends your public IP address to ip-api.com over HTTP for geolocation.

Satoru Gojo Live Wallpaper sends user-added shortcut URLs to Google's favicon service on its new tab page.

Signspaces lets any website send messages that change extension state and list settings.

Simple Units Converter (Lite) sends a user-entered URL to corsproxy.io when converting web content.

Smart TV Emulator lets embedding pages send synthetic key events into cross-origin frames.

Snap Screen Recorder sends an hourly Google Analytics heartbeat with a persistent extension client ID.

SocialPilot runs content scripts on all websites to help users share and schedule page content.

Spy Wolf Extension sends Facebook Ads Library search keywords to api.spywolfads.com after authentication.

Star Wars Wallpaper sends up to 10 top-visited site URLs to Google to load favicons on its new tab page.

Streaming Party works with Paramount Plus sends Paramount account, profile, viewing, and subscription data to remote servers.

Studylib New Tab handles sign-in messages on login_popup pages and stores the supplied StudyLib profile.

SurfPal sends daily configuration and usage telemetry with a persistent installation ID to stats.mutacore.com.

SwipeTube sends scraped YouTube ad details to api.swipetube.io after an access token is configured.

T-SWINDLER sends your Tinder account ID and creation date to its backend.

TabRevive lets any web page switch on its keep-alive page patches through a replayable postMessage bridge.

Tagbird exposes captured analytics request URLs and POST bodies to scripts on every page.

TakeScreenshot adds its clid identifier to Yandex search URLs when you navigate to search pages.

Temu image search harvests Temu product and store data and sends it to temuhunt.com plugin endpoints.

Tetris replaces the new-tab page with an iframe loaded from tetris-ten-phi.vercel.app.

The Big 5 sends Chrome top-sites URLs to Google's favicon service when the new tab page renders.

Thinking Time Tracker loads Google Fonts resources when its popup opens.

Thunder Download Support Pro sends the current page URL to Xunlei's stats server when remote stats are enabled.

Ultra Wallet broadcasts its unlocked state to every HTTPS page every two seconds.

VStat 3 sends active tab hostnames to vstat.info and uses remote jobs to collect traffic data for selected domains.

Voice control for chatGPT injects a Google Fonts stylesheet into ChatGPT pages.

The extension adds buttons beside WEBM links and fetches a Google Sheets promo feed in its converter UI.

Walftech Lua Generator loads Google Fonts and cdnjs stylesheets on Steam app pages.

WallySmarter sends authenticated Walmart search page URLs and keyword context to chrome.wallysmarter.com.

Weather Forecast includes a shared OpenWeatherMap API key and sends weather requests to OpenWeatherMap.

WebPreserver records HTTP and HTTPS request URLs, headers, cookies, and form bodies into extension storage.

XWAY stores a stable extension device ID in Wildberries and OZON page localStorage.

YouTube Detox sends lifecycle and daily usage analytics with browser and device details to Google Analytics.

YouTube翻過去 sends selected YouTube captions and summaries to SiliconFlow when you use its translation or summary controls.

Z3US lets any HTTP or HTTPS page send a message that locks the wallet vault.

eCommerce Profit Calculator injects a jsDelivr stylesheet into every page you visit.

n8n Copilot lets any website overwrite stored account and workflow-history data through its page messaging bridge.

tabVertikal sends side-panel JavaScript error details and browser user-agent data to bug-collector.noterail.workers.dev.

typedesk Canned Responses accepts page messages that clear its saved session state.