Is Spannel safe?

Low risk

Spannel sends the content of deleted and view-once WhatsApp Web messages to its own servers.

On web.whatsapp.com the extension loads a remote script that sends the original text of deleted and view-once messages, along with chat IDs, to the vendor's Spannel API. A webhook feature also forwards message content to the Spannel backend for relay to a configured URL. It keeps a WebSocket open to a server-supplied address that can push commands to the page.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

15Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed Spannel contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • apiexpress.spannel.com.br

    Spannel sends data to apiexpress.spannel.com.br. No other extension we have analysed sends data here.

Updated 15 October 2026cphlppigmkonndhcpnegljpbandclflk