Is Volume Booster safe?

Question

Accepted Answer

Volume Booster is medium risk. Volume Booster, an extension whose stated purpose is boosting audio volume, bundles a third-party advertising/donation SDK called GiveFreely. The SDK's content script is injected into every page you visit (declared <all_urls> in the manifest). When you land on a shopping cart or checkout page, the SDK detects the shopping context from the page URL and the page's Shopify markup, then sends an event to GiveFreely's servers that includes the full page URL plus a persistent per-browser user ID. During dynamic analysis, navigating to a retailer cart produced a POST to events.givefreely.com carrying eventType CHECKOUT-POPUP-SHOWN, the cart URL, and a persistent userId. None of this data collection is described in the extension's store listing, which presents the product solely as a volume control.

Is Volume Booster safe?

Findings