Is Tada Browser Extension safe?

Low risk

Tada sends visited merchant URLs and scraped order-history data from logged-in members to an AWS Firehose stream.

For logged-in members who have not opted out, the extension records the merchant URLs they visit and, on supported shopping sites, injects a script that reads order IDs, totals, dates and product names from order-history and purchase pages. These records, tagged with the member ID, are sent to an AWS Kinesis Firehose stream using temporary credentials issued by the vendor's API.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

ShopAtHomev400.10.5.3852Firefox Add-ons
19Risk
Who publishes it

ShopAtHome - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
ShopAtHome

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 400.10.5.3852. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    http://*/ and 1 more

  • See the address and title of every tab you have open

    tabs

  • Schedule its own background tasks

    alarms

  • Store data in your browser

    storage

  • Read and change cookies, including the ones that keep you signed in

    cookies

  • Watch every request your browser makes

    webRequest

  • See every page you navigate to, as you navigate to it

    webNavigation

Where it sends data

Destinations our analysis observed Tada Browser Extension contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • AWS Kinesis Firehose (stream and region issued by the Tada API)

    Tada Browser Extension sends data to AWS Kinesis Firehose (stream and region issued by the Tada API). Named as a recipient in this extension's own analysis.

Updated 15 October 2026amo-773298