Is Voice Control for ChatGPT safe?

// On first run, generate a UUID and persist it in local storage.
// All subsequent calls return the same UUID, creating a durable cross-session identity.
async function getOrCreateClientId() {
  let clientId = (await chrome.storage.local.get('clientId')).clientId;
  if (!clientId) {
    clientId = self.crypto.randomUUID();
    await chrome.storage.local.set({ clientId });
  }
  return clientId;
}

const SESSION_TIMEOUT_MINUTES = 30;

async function getOrCreateSessionId() {
  let { sessionData } = await chrome.storage.session.get('sessionData');
  const now = Date.now();
  if (sessionData?.timestamp) {
    const minutesElapsed = (now - sessionData.timestamp) / 60000;
    if (minutesElapsed > SESSION_TIMEOUT_MINUTES) {
      sessionData = null; // session expired, create new one
    } else {
      sessionData.timestamp = now; // refresh session TTL
      await chrome.storage.session.set({ sessionData });
    }
  }
  if (!sessionData) {
    sessionData = { session_id: now.toString(), timestamp: now.toString() };
    await chrome.storage.session.set({ sessionData });
  }
  return sessionData.session_id;
}

const GA_ENDPOINT = 'https://www.google-analytics.com/mp/collect';
const MEASUREMENT_ID = 'G-67EVHBE3DC';
const API_SECRET = '<redacted>'; // GA4 Measurement Protocol api_secret — value redacted
const ENGAGEMENT_TIME_MS = 100;

let eventQueue = [];
let lastFlushTime = Date.now();

async function flushEventQueue() {
  if (eventQueue.length === 0) return;
  lastFlushTime = Date.now();
  const events = eventQueue; // capture current queue
  eventQueue = [];           // reset before async work
  const clientId = await getOrCreateClientId();
  await fetch(
    `${GA_ENDPOINT}?measurement_id=${MEASUREMENT_ID}&api_secret=${API_SECRET}`,
    {
      method: 'POST',
      body: JSON.stringify({ client_id: clientId, events: [events] }),
    }
  );
}

// Queue an event, flushing immediately or after a 2-second debounce.
function queueEvent(event) {
  eventQueue.push(event);
  if (eventQueue.length > 0) {
    if (lastFlushTime + 2000 > Date.now()) {
      flushEventQueue(); // flush immediately if recent
    } else {
      setTimeout(flushEventQueue, 2000); // debounce
    }
  }
}

// Enrich an incoming gaEvent message from the content script with tracking IDs.
async function sendGaEvent(event) {
  const clientId = await getOrCreateClientId();
  const sessionId = await getOrCreateSessionId();
  const params = event?.params ?? {};
  const enrichedEvent = {
    ...event,
    params: {
      ...params,
      client_id: clientId,
      session_id: sessionId,
      engagement_time_msec: ENGAGEMENT_TIME_MS,
    },
  };
  queueEvent(enrichedEvent);
}

// Message listener: handles gaEvent messages relayed by the content script
chrome.runtime.onMessage.addListener(async (message, sender, sendResponse) => {
  // ... other message types ...
  if (message.gaEvent) await sendGaEvent(message.gaEvent);
  // ...
  sendResponse({ message: 'Message received' });
});