Is Sparos safe?
Sparos sends the LinkedIn profile identifier from its overlay to api.sparos.tech when a user opens the contact panel.
When a user opens the Sparos panel on a LinkedIn profile page, the extension extracts the profile identifier from the URL and requests contact data from api.sparos.tech with reveal enabled. Its all-page content UI can also load Google's Inter font stylesheet, which sends page request metadata such as the URL or referrer and IP address to fonts.googleapis.com.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 1.2.1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on api.sparos.tech
https://api.sparos.tech/*
Read and change your data on linkedin.com
https://*.linkedin.com/*
Read and change your data on logto.app
https://*.logto.app/*
Read and change your data on auth.sparos.tech
https://auth.sparos.tech/*
Sign you in with your Google account
identity
Store data in your browser
storage
Act on the current tab, but only after you click the extension
activeTab
Where it sends data
Destinations our analysis observed Sparos contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- fonts.googleapis.comwidely used
Sparos sends data to fonts.googleapis.com. A widely used service: 123 other extensions we have analysed send data here.
- api.sparos.tech
Sparos sends data to api.sparos.tech. No other extension we have analysed sends data here.