Is WebRTC Leak Shield safe?

WebRTC Leak Shield permanently exempts its developer domain 'interdrop.com' from WebRTC blocking without disclosing this to the user.

The extension hardcodes 'interdrop.com' in an internal locked allowlist that overrides both the user's own allowlist and the blocking engine — making WebRTC fully active on that domain with no visible entry in the UI. Additionally, the extension writes its shield state and the user's personal site-allowlist into page-accessible localStorage keys on every visited page, allowing any web page to detect the extension and read the user's allowlist configuration.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.