Is Sitekick safe?
Sitekick loads a hidden widget frame from sitekick.app on every https page, passing the visited hostname.
On every https page, the extension adds a widget whose iframe is hidden but still loads from widget.sitekick.app, with the site's hostname in the URL. The vendor therefore receives the hostname, IP address and referrer of each site visited, without any user action. Only the hostname is sent, not the full path.
Who publishes itsitekick.app - no other listings under this identity
sitekick.app - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed Sitekick contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- widget.sitekick.app
Sitekick sends data to widget.sitekick.app. No other extension we have analysed sends data here.