Is WA Toolbox by Elbruz Technologies safe?

Medium risk

WA Toolbox by Elbruz Technologies sends deleted WhatsApp message bodies and call records to its Firebase project.

When an active subscription is present, the extension listens to WhatsApp activity in the page and records revoked messages and call events. The saved records can include the user's phone number, message IDs, deleted message body text, sender details, chat identifiers, call type, and timestamps.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Elbruz Technologiesv2.1.15Chrome Web Store
40Risk
Who publishes it

Elbruz Technologies - 1 other listing from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Elbruz Technologies
Declared legal entity
Elbruz Technologies
Registered address
Tozkoparan, Abdurrahman Nafiz Gürman Mah, General Ali Rıza Gürcan Cd., No: 27 Daire: 148, Güngören, İstanbul 34164, TR

Same store account

1 other listing published from this account, 2.0M+ users between them, none of them carrying a finding.

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed WA Toolbox by Elbruz Technologies contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • firestore.googleapis.com

    WA Toolbox by Elbruz Technologies sends data to firestore.googleapis.com. 16 other extensions we have analysed send data here.

  • wa-toolbox.firebaseio.com

    WA Toolbox by Elbruz Technologies sends data to wa-toolbox.firebaseio.com. No other extension we have analysed sends data here.

Updated 30 September 2026loghhaklnjjcadamhdelnijifegndfkh