Is Wandrer Map Overlay safe?

Medium risk

Wandrer Map Overlay lets scoped route-planning pages read saved extension storage, including the user's Wandrer API key.

On supported route-planning sites, page scripts can ask the extension for values from its Chrome sync storage through a DOM event. If the user has saved a Wandrer API key, those pages can receive it; the extension also removes Content-Security-Policy headers from Garmin Connect pages.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

wandrer.earthv2.0.0.22Chrome Web Store
40Risk
Who publishes it

Wandrer, LLC - no other listings under this identity, 6 shared hostnames

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
wandrer.earth
Declared legal entity
Wandrer, LLC
Registered address
138 Kirkwood Road Northeast, #6, Atlanta, GA 30317, US
Registered contact
Craig Durkin

Shared hosts - 6 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

brouter.m11n.de
Also called by 2 other listings: StatsHunters, StatsHunters
dynamic.watch
Also called by 3 other listings: StatsHunters, StatsHunters, dynamicWatch Save
plotaroute.com
Also called by 3 other listings, including StatsHunters, StatsHunters
brouter.de
Also called by 4 other listings
bikerouter.de
Also called by 5 other listings, including Squadrats Route Planning, Squadrats Route Planning
veloviewer.com
Also called by 5 other listings, including Elevate

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed Wandrer Map Overlay contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • bikerouter.de

    Wandrer Map Overlay sends data to bikerouter.de. 2 other extensions we have analysed send data here.

  • brouter.de

    Wandrer Map Overlay sends data to brouter.de. 2 other extensions we have analysed send data here.

  • brouter.m11n.de

    Wandrer Map Overlay sends data to brouter.m11n.de. 2 other extensions we have analysed send data here.

  • connect.garmin.com

    Wandrer Map Overlay sends data to connect.garmin.com. 2 other extensions we have analysed send data here.

  • komoot.com

    Wandrer Map Overlay sends data to komoot.com. 2 other extensions we have analysed send data here.

  • komoot.de

    Wandrer Map Overlay sends data to komoot.de. 2 other extensions we have analysed send data here.

  • komoot.es

    Wandrer Map Overlay sends data to komoot.es. 2 other extensions we have analysed send data here.

  • komoot.fr

    Wandrer Map Overlay sends data to komoot.fr. 2 other extensions we have analysed send data here.

  • komoot.it

    Wandrer Map Overlay sends data to komoot.it. 2 other extensions we have analysed send data here.

  • komoot.nl

    Wandrer Map Overlay sends data to komoot.nl. 2 other extensions we have analysed send data here.

  • ridewithgps.com

    Wandrer Map Overlay sends data to ridewithgps.com. 2 other extensions we have analysed send data here.

  • www.strava.com

    Wandrer Map Overlay sends data to www.strava.com. 2 other extensions we have analysed send data here.

  • dynamic.watch

    Wandrer Map Overlay sends data to dynamic.watch. One other extension we have analysed sends data here.

  • bikemap.net

    Wandrer Map Overlay sends data to bikemap.net. No other extension we have analysed sends data here.

  • veloviewer.com

    Wandrer Map Overlay sends data to veloviewer.com. No other extension we have analysed sends data here.

  • www.mapmyride.com

    Wandrer Map Overlay sends data to www.mapmyride.com. No other extension we have analysed sends data here.

  • www.mapmyrun.com

    Wandrer Map Overlay sends data to www.mapmyrun.com. No other extension we have analysed sends data here.

  • www.plotaroute.com

    Wandrer Map Overlay sends data to www.plotaroute.com. No other extension we have analysed sends data here.

Updated 30 September 2026nmcamjnbjejckmdbobepfjdehbfillan