Is Toggl Plan: Project Planning Calendar safe?
Toggl Plan sends page URLs from supported project-management sites to Google Analytics with the user's Toggl ID.
When its injected buttons are used, site scripts pass the current hostname and full page URL to the background script, which posts them to Google Analytics using the stored Toggl user ID. The shipped bundle also embeds the Toggl OAuth client secret used when exchanging passwords or refresh tokens with Toggl's authentication endpoint.
Who publishes itToggl OÜ - 2 other listings from the same operator, none carrying a finding
Toggl OÜ - 2 other listings from the same operator, none carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same operator - 2 listings
Published under a different store account, but sharing the registered address, contact or declared legal entity this one gave the store.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 3.2.1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on toggl.com
*://*.toggl.com/*
Read and change your data on toggl.space
*://*.toggl.space/*
Store data in your browser
storage
Add items to the right-click menu
contextMenus
Sign you in with your Google account
identity
Where it sends data
Destinations our analysis observed Toggl Plan: Project Planning Calendar contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- www.google-analytics.comwidely used
Toggl Plan: Project Planning Calendar sends data to www.google-analytics.com. A widely used service: 346 other extensions we have analysed send data here.
- api.plan.toggl.com
Toggl Plan: Project Planning Calendar sends data to api.plan.toggl.com. No other extension we have analysed sends data here.