Is Staffbase Email safe?

Clean risk

Staffbase Email captures outgoing Gmail subject, recipients, and links on send and posts them to its Bananatag tracking backend.

On Gmail compose, the extension's content script collects each outgoing message's subject, recipient list, and embedded links, and POSTs them to serviceapi-v3-prod.bananatag.com to register the email for tracking. When link tracking is enabled, it also reads the anchor links in the message body and rewrites each one through the s2.bl-1.com redirector so opens and clicks can be logged. The content script runs only on mail.google.com, and the tracking behavior is the extension's stated purpose.

Staffbasev5.5.1Chrome Web Store
0Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Data recipients

serviceapi-v3-prod.bananatag.coms2.bl-1.comStaffbase / Bananatag
Updated 17 September 2026jpbnpbfpgjkblmejlgkfkekajajhjcid