Low risk browser extensions

GeoGuessr timer loads Google Fonts when its settings or saved-times pages open.

Get YouTube Transcript by CakeAI sends YouTube transcript contents and video metadata to cacheyoutubetranscript.totext.xyz.

GoodPlan stores encrypted notes locally using a passphrase shipped inside the extension bundle.

Goodhue sends selected and hovered image URLs to Goodhue-hosted services.

Google Account Easy Switch appends the selected Google account index to the active tab URL, even on non-Google sites.

Google Meet Attendance Tracker (new) stores participant names and IDs in Google Meet localStorage during tracking.

Grips sends visited domains to a CloudFront endpoint and posts active-tab page views to Google Analytics on extension clicks.

Haikyuu Wallpaper sends URLs from your browser's top sites to Google's favicon service on the new-tab page.

Hexomatic lets configured localhost pages overwrite stored authentication values used for its API calls.

Humantic AI lets page scripts on supported sites trigger authenticated requests to api.humantic.ai.

ImportKit forces on a hidden search insights module that sends Goofish and Taobao search terms to Supabase.

Influence4You reads public profile email addresses and sends them to app.influence4you.com.

Inspect Element creates a persistent Amplitude ID and sends usage telemetry to api.amplitude.com.

Jace Gmail Extension sends a bundled bearer token to a Zeta Labs dev API when its popup polls thread data.

JavaScript Errors Notifier lets webpages request extension storage option values through its all-sites message bridge.

Jinno lets any website overwrite the extension account session through its page message bridge.

Joke Of The Day loads Google Fonts when its extension popup is opened.

K Searches sends hostnames from your top sites to Google's favicon service on the new-tab page.

KMITL + loads Google Fonts on KMITL schedule pages, sending those page visits to fonts.googleapis.com.

Keyboard Shortcuts to Reorder Tabs lets pages simulate shortcut keys that move the active tab.

Kuromi Live Wallpaper fetches remote popup HTML and shortcut definitions from Gameograf for its new-tab page.

Layerpath sends visited page URLs and domains from its all-sites content script to Dash0 telemetry.

Lebron James Wallpaper sends URLs from Chrome's top-sites list to Google's favicon service on the new-tab page.

Leet Xt sends the signed-in LeetCode username to a Cloudflare Worker and AWS Lambda URL once per day.

LeoMeasure copies Shopify custom pixel iframe dataLayer events into the top-level page when preview mode is enabled.

Lionel Messi Wallpaper sends top-site URLs from the new-tab page to Google's favicon service.

LionsTab sends Chrome top-site URLs to Google's favicon service when opening a new tab.

Load Spotter sends DAT truck posting details to Truckbase's auto-emailer API.

Lufe.ai sends text selected for translation to external translation services.

Lunabot sends each top-level page URL and title to Lunabot web-config APIs.

MOCO Zeiterfassung accepts unsigned embedded-page messages that can submit MOCO activity data through the extension.

MagicLinks sends Google search result URLs for partner domains to a.chipp.us with account identifiers.

Make it tool Extension sends extension event data with a stored client ID to Google Analytics.

MerchFlow for Merch by Amazon sends stored license keys and account identifiers to its analytics servers.

Mock:Intercept and directly return data exposes saved mock rules to every page and lets page messages change request hooks.

ModernLoop Extension can send ATS page details to a base URL set by allowed external pages.

My Custom Sports sends top-site hostnames to Google's favicon service when its new-tab page loads.

MyPicture for Netflix opens its survey page with a persistent extension-generated user identifier.

MyTravel Tab sends IP-derived location to its weather service and routes new-tab searches with stored identifiers.

N-bot sends your signed-in Teams account identifier and saved class timetable to nithins.me.

NameMC Extras sends visited NameMC profile page URLs to gadgets.faav.top.

Nautica sends Chrome top-sites hostnames to Google's favicon service on its new-tab page.

New Tab Nature sends new-tab search terms to Amplitude with a persistent extension user ID and browser user agent.

Nocodable lets its web app request Facebook tracking identifiers and page context from Bubble editor pages.

NotedIt sends search-activity telemetry after redirects from its configured search provider.

One Piece Wallpaper sends precise browser geolocation to OpenWeatherMap for its new-tab weather widget.

Open Prompt Manager places saved prompt titles, contents, and tags into the page DOM on permitted sites.

Orbit CME sends medical article browsing details, interaction counts, and installed extension metadata to orbitcme.com.

PDF Signer stores uploaded PDF contents in the browser's local storage so they reload when the page opens.

Password Generator stores generated passwords in extension localStorage when history is left on.

Peacock TV Picture In Picture [QVI] sends Peacock account and viewing data to me3x.online and metricsmint.quest.

Pikabu Fixes shares its Chrome extension ID with page scripts on Pikabu pages.

Pink Aesthetic Wallpaper sends your new-tab top sites to Google's favicon service.

Pinterest Dark Theme Revanced loads donation button images from img.buymeacoffee.com in its extension UI.

PlayerTube places its synced YouTube player settings into the page DOM.

Poehalisnami CRM plugin exposes CRM notification contents to every website through an open shadow root.

Prime Sender Advance sends your IP address to ip-api.com over HTTP for locale detection.

Progressive Downloader sends download URLs, referrers, and cookies to its downloader service.

Prompt Tool - Midjourney Prompt Helper sends copied generated prompts with a UUID and IP profile to Aliyun logging.

PromptForge removes ChatGPT's CSP header and sends a detected ChatGPT account email to ext.promptden.com.