Is tab.pics safe?

Low risk

tab.pics fetches new-tab photo metadata over HTTP from tab.pics for the selected subreddit.

When a new tab opens, tab.pics requests photo metadata from http://tab.pics/api/{subreddit} and stores the response in localStorage for rendering the page. Its options page also fetches http://tab.pics/api/subreddits, so the selected subreddit or subreddit-list request and the user's IP address are sent over cleartext HTTP.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Ryan Duryv2.0.0Chrome Web Store
15Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 2.0.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Store data in your browser

    storage

  • Read the sites you visit most

    topSites

Where it sends data

Destinations our analysis observed tab.pics contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • tab.pics

    tab.pics sends data to tab.pics. No other extension we have analysed sends data here.

Updated 30 September 2026hcaanmfcilckhmibiacbenapbdjgcnfa