Is Supersana.io for Asana safe?

Low risk

Supersana.io for Asana sends your Asana account name, email, and the machine's public IP to its own backend on every app.asana.com visit.

Before injecting any of its productivity features, the extension checks the current user against a block/allow list hosted at kickstartextensions.com, sending the account's name, email, workspace gid, and a public IP looked up via api.ipify.org along with the page URL. It also reports which features are enabled to the same backend whenever the popup syncs, and includes the account gid in the URL opened on uninstall. All of these calls go to the vendor's own domain (TeamKickstart/Supersana.io) rather than a third party, and only fire once a user is signed in with a Pro account.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Kickstart Extensions, powered by TeamKickstart.comv1.98.58Chrome Web Store
20Risk
Who publishes it

Kickstart Extensions, powered by TeamKickstart.com - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Kickstart Extensions, powered by TeamKickstart.com
Website
teamkickstart.com/contact

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.98.58. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    <all_urls>

  • Store data in your browser

    storage

  • See the address and title of every tab you have open

    tabs

  • Read and change your full browsing history

    history

  • Add items to the right-click menu

    contextMenus

  • Start, monitor and manage your downloads

    downloads

  • Run its own code inside the pages you visit

    scripting

  • See every page you navigate to, as you navigate to it

    webNavigation

Where it sends data

Destinations our analysis observed Supersana.io for Asana contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • api.ipify.orgwidely used

    Supersana.io for Asana sends data to api.ipify.org. A widely used service: 58 other extensions we have analyzed send data here.

  • kickstartextensions.com

    Supersana.io for Asana sends data to kickstartextensions.com. No other extension we have analyzed sends data here.

Updated 15 October 2026ajffdfegnkejimlfnijmdlbpllhghdpk