Is Temu Download | both Image & Video Downloader safe?

Clean risk

Temu Download sends your public IP address and a persistent device UUID to Supabase when its popup opens.

When the popup launches, the extension fetches your public IP address and records a launch event. That event is sent to a Supabase endpoint with the IP address, a persistent locally stored device UUID, extension metadata, and browser/distribution details.

temu.toolkitv1.0.3Chrome Web Store
0Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.0.3. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • See the address and title of every tab you have open

    tabs

  • Sign you in with your Google account

    identity

  • Store data in your browser

    storage

Where it sends data

Destinations our analysis observed Temu Download | both Image & Video Downloader contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • qbedzukaxpsvpodfmhqj.supabase.co

    Temu Download | both Image & Video Downloader sends data to qbedzukaxpsvpodfmhqj.supabase.co. One other extension we have analysed sends data here.

Updated 30 September 2026ffhgminbjmecipmpjeklfcggefainefg