Low risk browser extensions

PageSpeed Insights sends the current page URL to Google's PageSpeed Insights API when you open its sidebar.

PageSpeed Saver stores saved PageSpeed report URLs, scores, and Lighthouse JSON in pagespeed.web.dev IndexedDB.

Painless CC lets a localhost page retrieve saved YouTube subtitle contribution drafts after the user starts sharing them.

Panda Dome Password Manager lets opted-in webpages add password entries to the logged-in vault.

Pandro sends your Instagram account identity and periodic automation activity reports to instech.tech.

Paperflite Extension for Chrome adds Gmail tracking pixels and link redirects and sends sent-message metadata to Paperflite.

Paraphrase Tool sends selected page or form text with a persistent user ID to its AI backend after user actions.

Paris MeaVana strips CSP and frame-protection headers and can send sidebar translation text to Google Translate.

Password Protect PDF opens its PDF-protection workflow over cleartext HTTP on install and when clicked.

Peach and Goma Live Wallpapers loads remote popup HTML into its new-tab page.

Peacock TV Extended sends Peacock viewing events, profile data, and account email to me3x.online and metricsmint.quest.

PeakAI sends a persistent extension device ID and IP-derived country telemetry to Amplitude when its popup opens.

People Also Ask fetches remote ad configuration when it is installed or used on Google Search.

Perseo records HTTP(S) page navigation URLs and request and response headers in local extension storage.

Petapator automatically sends patent and PubMed search result content to its chat backend.

Phaser Debugger exposes its extension runtime URL to page scripts through a temporary DOM attribute on every site.

Photo to Text sends selected images and screenshots to ethereal-expanse.com with a persistent per-install user ID.

Pic to Text lets any website ask its OCR frame to read a supplied image URL and return the extracted text.

Picture in Picture works with Paramount [QVI] sends Paramount profile, account, subscription, and watch data to remote servers.

Piez adds Akamai diagnostic headers to requests sent to websites you visit.

Pinky Cursor adds an extension-ID-derived CSS class to every matched page.

Pitch Shifter adds permissive CORS headers to media responses while the extension is installed.

Plex Download Extension can generate Plex download URLs with a page-stored access token after loose Plex URL matching.

Podcast Hero loads remote Google Analytics JavaScript on its custom new-tab search page.

Pointofmail.com Email Tracking & Recall registers your Gmail address and timezone with Pointofmail when Gmail loads.

Pokemon Family Live Wallpaper fetches popup HTML from Gameograf and inserts it into its new-tab page.

Porn Blocker & Adult Content Filter - PurityGuard embeds premium license keys and validates upgrades inside the extension.

Potion Screen Recorder lets almost any website trigger its screen-recording workflow and sends recording chunks to app.sendpotion.com.

PriceDaddy! sends realestate.com.au listing image URLs to corsproxy.io to check when a property image was last updated.

Prime Video Subtitles Translator lets webpages ask the extension to fetch arbitrary subtitle URLs.

Prod exposes its blocklist settings inside an open page-readable shadow DOM on every site.

Product Relister for Mercari sends Mercari page diagnostics and interaction breadcrumbs to Sentry when errors occur.

Profile+ sends social creator profile metadata and video engagement data from TikTok, Instagram, and YouTube to app.findmecreators.com.

Prolific Telegram Alerts sends Prolific study details and local alert settings to prolificapi.notifyme.top.

Purchr lets any webpage trigger a saved-item upload with the current page URL and title.

Purple Wallpaper sends top-site URLs to Google's favicon service from its new-tab page.

Pusheen Cursor adds its extension runtime ID prefix as a CSS class on every page.

Qubba injects vendor-hosted calculator JavaScript from erp.qubba.io into Wildberries marketplace pages.

Quick Delete for Gmail runs on Gmail pages and records Gmail navigation state in browser storage.

QuickDrag for Chrome accepts cross-frame messages that can open tabs or start downloads.

Quickpage accepts page-supplied login data and stores it for later Quickpage portal sessions.

Quran In New Tab sends top-site URLs to Google's favicon service when rendering its new-tab page.

RadFlow Connector lets approved RadFlow sites send messages to a local native host and manage viewer windows.

Rafiq sends your browser's location coordinates to Aladhan when its default prayer widget loads.

Rahat Aktarım lets any website save quick-fill instructions that the extension later applies on matching sites.

Rango accepts clipboard JSON commands that can trigger privileged tab actions after the request shortcut is pressed.

Rate My ASU Professors sends ASU instructor names to Rate My Professors to fetch rating data.

ReYohoho W.TV Extension sends your W.TV nickname and proxied channel/media requests to ext.rte.net.ru.

React code finder stores React component props from inspected sites and can send editor selections to localhost.

React1s lets any website trigger its editor-opening message handler with page-supplied file paths.

ReadFast - Speed Reading opens selected, page, or clipboard text in a local speed-reading frame.

Readify replaces Content-Security-Policy headers with a media-only policy on every page and frame.

Ready Mail New Tab exposes its persistent install alias to newtabtools.com pages.

Real Debrid Manager loads popup and settings page stylesheets from public CDN hosts.

Recruiterbolt For Salesforce sends the user's installed-extension list to Salesbolt once per day.

Reddit post notifier asks Reddit for history access when users connect an account.

Referral Codes Reminder contacts api64.ipify.org on install, exposing the user's public IP address to that service.

Relay AutoBooker sends Amazon Relay company/status telemetry and AutoBooker settings to Cardamon cloud services.

Remove Sora Watermark sends a stable anonymous browser identifier to its API for quota and download requests.

Revo Capture sends user-created issue reports with screenshots, page URL, DOM details, and recent network records to Revo.