Is Treatstream safe?

Treatstream reads your delivery address from food-ordering sites like GrubHub and sends it with a session token to treatstream.com.

On supported food-delivery sites the content script scrapes the delivery address shown on the page and POSTs it, along with a Treatstream session token, to treatstream.com/addtreat/chkAddress. The list of sites it acts on is fetched remotely from treatstream.com/addtreat/getSetting and applied verbatim, so the active-site set can be changed from the server. On GrubHub it also reads OAuth/session cookies and intercepts restaurant API request URLs that embed your location coordinates, and it runs DevTools-detection routines on each supported page.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.