Is TunnelBear VPN safe?

Clean risk

Encrypts Chrome browsing traffic through TunnelBear’s private network.

This extension provides a VPN connection for Chrome that encrypts browsing traffic. It is described as helping reduce website, advertiser, and ISP tracking, secure browsing on public Wi‑Fi, access blocked websites, and connect through locations in 20 countries.

TunnelBearv4.1.0Chrome Web Store
0Risk
Who publishes it

TunnelBear, LLC - 5 other listings from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
TunnelBear
Declared legal entity
TunnelBear, LLC
Registered address
6220 America Center Dr, San Jose, CA 95002, US
Registered contact
TunnelBear

Same operator - 5 listings

Published under a different store account, but sharing the registered address, contact or declared legal entity this one gave the store.

Shared hosts - 10 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

api.polargrizzly.com
Also called by 2 other listings, including TunnelBear VPN
api.tunnelbear.com
Also called by 2 other listings, including TunnelBear VPN
bearsmyip.com
Also called by 2 other listings, including TunnelBear VPN
help.tunnelbear.com
Also called by 2 other listings
prod-api-dashboard.tunnelbear.com
Also called by 2 other listings, including TunnelBear VPN
tunnelbear.com
Also called by 3 other listings
app.configcat.com
Also called by 5 other listings, including eesel: ChatGPT document search
cdn-eu.configcat.com
Also called by 5 other listings, including eesel: ChatGPT document search
configcat.com
Also called by 5 other listings, including eesel: ChatGPT document search
cdn-global.configcat.com
Also called by 6 other listings, including eesel: ChatGPT document search

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 4.1.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    <all_urls>

  • Route all of your browsing through a server of its choosing

    proxy

  • Store data in your browser

    storage

  • Block and redirect the requests your browser makes

    declarativeNetRequest

  • Watch every request your browser makes

    webRequest

  • Change your browser's privacy and security settings

    privacy

  • See, disable and uninstall your other extensions, including your security ones

    management

webRequestAuthProvider

Where it sends data

Destinations our analysis observed TunnelBear VPN contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • TunnelBear

    TunnelBear VPN sends data to TunnelBear. Named as a recipient in this extension's own analysis.

Updated 30 September 2026omdakjcmkglenbhjadbccaookpfjihpa