Is Unsplash Instant safe?

Low risk

Unsplash Instant assigns each user a persistent UUID and transmits it to Google Analytics on every new tab open.

Each time a new tab is opened, the extension posts a page_view event to Google Analytics via the GA4 Measurement Protocol, including a client_id UUID stored in chrome.storage.local. The UUID is generated once on first run and never rotated or expired, creating a stable long-term identifier tied to the user's tab-open activity. Additional events such as photo_downloaded and setting_changed are also sent with this identifier.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Unsplashv4.0.1Chrome Web Store
15Risk
Who publishes it

Unsplash - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Unsplash
Declared legal entity
Unsplash
Registered address
1240 20 Ave SE suite 301, Calgary, AB T2G 1M8, CA
Registered contact
Kirill

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed Unsplash Instant contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • www.google-analytics.comwidely used

    Unsplash Instant sends data to www.google-analytics.com. A widely used service: 346 other extensions we have analysed send data here.

Updated 30 September 2026pejkokffkapolfffcgbmdmhdelanoaih