Is WebChatGPT safe?

Question

Is WebChatGPT safe?

Accepted Answer

Our review of WebChatGPT surfaced the following. When account-call data includes an email address, the extension sends the account object to https://api.maxai.me/user/vote as an encrypted info_object value. The passphrase used for that encryption is the fixed string MaxAI inside the extension, and verification evidence showed a sample account object encrypted with that passphrase could be decrypted back to the original email, user ID, and name. When the extension starts or refreshes expired settings, its background worker requests configuration from phtracker.com and saves the returned values in extension storage. Dynamic analysis observed the configuration refresh after cached settings were cleared, and the stored fields included disableVersion and interval values that can change whether features run and how often settings refresh.

Is WebChatGPT: Prompt library with web access safe?

Findings