Is SegChat safe?

Low risk

SegChat sends WhatsApp Web deleted messages, view-once messages and webhook-bound message content to its own servers.

On web.whatsapp.com, the extension injects a script that, when its feature flags are on, posts deleted-message originals and view-once message payloads to the vendor's API. A webhook module also forwards message content to the vendor backend for relay to webhooks the user configures. Requests carry a bearer token stored by the extension.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

15Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed SegChat contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • apiexpress.segchat.com

    SegChat sends data to apiexpress.segchat.com. No other extension we have analysed sends data here.

Updated 15 October 2026bbgmjfbmefilkjenmicnpfolpkpclgil