Is Seelie Companion safe?

Clean risk

Seelie Companion can return HoYoLAB authentication cookies to scripts running on seelie.me.

When a seelie.me page sends the extension a page message asking for HoYoLAB cookies, the extension reads matching .hoyolab.com cookies from the browser and posts the result back to that page. The default response includes ltmid_v2 and ltoken_v2 cookie values, and the page can request selected cookie names.

1Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.3. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on hoyolab.com

    *://*.hoyolab.com/*

  • Read and change your data on hoyoverse.com

    *://*.hoyoverse.com/*

  • Read and change cookies, including the ones that keep you signed in

    cookies

Where it sends data

Destinations our analysis observed Seelie Companion contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • seelie.me

    Seelie Companion sends data to seelie.me. No other extension we have analysed sends data here.

Updated 30 September 2026jjohhopfgnnoolmgjnhggajacjlipiag