Is Swiggy Zomato Blinkit Spends safe?
Swiggy Zomato Blinkit Spends sends active-tab Blinkit token values to Blinkit order-history endpoints.
When the popup is opened on a tab whose URL contains blinkit.com, the extension reads Blinkit-named cookies plus authKey and sessionId values from page storage. It uses those values as Auth_key, Access_token, Session_uuid, and Device_id headers on requests to Blinkit order-history URLs. Because the URL check is only a substring match, a non-Blinkit page with blinkit.com in its URL can have same-named values forwarded to Blinkit.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed Swiggy Zomato Blinkit Spends contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- blinkit.com
Swiggy Zomato Blinkit Spends sends data to blinkit.com. No other extension we have analysed sends data here.