Am I Being Pwned? logoAm I Being Pwned?
Book a demo
HomeStayFree - Track & Block Sites
Findings · 3
+5 more findings locked
CRITICAL FINDINGS · 3
  1. 01Bundles @sensortower/ad-finder ('Pathmatics ad-finder') content script which injects an in-page crawler on every visited site (content_scripts.matches=*://*/*) and exfiltrates discovered ad creative HTML/markup to api-pm.stayfreeapps.com/Ajax0001/IPD
  2. 02Content script content-scripts/gen-ai-collector.js (matches=*://*/*) scrapes user-submitted prompts from ChatGPT, Claude, Gemini, Grok, Perplexity, Copilot, and Deepseek conversations and uploads them to api.stayfreeapps.com/v1/ai/analytics
  3. 03Content script content-scripts/chatbot-finder.js (matches=*://*/*, all_frames=true) fingerprints embedded business chatbots (Sierra, Kustomer, Gorgias, Shopify Inbox, ElevenLabs, Gladly, Agentforce, Retell, Big Sur AI, Gupshup) on every site visited, then BG uploads chatbot presence + path metadata to api.stayfreeapps.com/v1/ai/chatbot
+5 more findings locked
OTHER EXTENSIONS

Is StayFree - Track & Block Sites safe?

Critical risk

No summary available.

Sensor Tower, Inc.v2.6.1Chrome Web Store
100Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

+5 more findings not shown

Book a call to see all findingsScan your browser
Updated 30 May 2026com.sensortower.stayfree.safari-desktop.Extension

Am I Being Pwned?

Protecting organizations from malicious browser extensions.

© 2026 Bay Area Labs Inc. All rights reserved.

BlogHow it worksSecurityFor VendorsFAQAPI DocsPrivacy PolicyTerms of ServiceContact