Is PocketTube: Youtube Subscription Manager safe?

Low risk

PocketTube sends a persistent UUID-linked event log to Mixpanel, including IP geolocation, on every tracked user interaction.

On installation, PocketTube generates a hex UUID stored in chrome.storage and uses it as a Mixpanel distinct_id on every subsequent analytics call. Events such as extension install, popup opens, playlist interactions, and channel visits are encoded and transmitted to api.mixpanel.com/track with the ?ip=1 flag, which instructs Mixpanel to record and geolocate the sender's IP address. The analytics payload also includes browser type, YouTube language, and extension version.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Dima Nabokv18.10.8Firefox Add-ons
16Risk
Who publishes it

Dima Nabok - no other listings under this identity, 5 shared hostnames

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Dima Nabok

Shared hosts - 5 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

he-tree-vue.phphe.com
Also called by 5 other listings, including PocketTube, PocketTube: Youtube PlayList Manager
i.yousub.info
Also called by 5 other listings, including PocketTube, YSM, PocketTube: Youtube PlayList Manager
p.yousub.info
Also called by 5 other listings, including PocketTube, YSM, PocketTube: Youtube PlayList Manager
pockettube.io
Also called by 5 other listings, including PocketTube, YSM, PocketTube: Youtube PlayList Manager
yousub.info
Also called by 5 other listings, including YSM

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 18.10.8. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on youtube.com

    https://*.youtube.com/*

  • Schedule its own background tasks

    alarms

  • Store data in your browser

    storage

  • Store an unlimited amount of data in your browser

    unlimitedStorage

  • Sign you in with your Google account

    identity

  • Add items to the right-click menu

    contextMenus

  • Watch every request your browser makes

    webRequest

Where it sends data

Destinations our analysis observed PocketTube: Youtube Subscription Manager contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • api.mixpanel.comwidely used

    PocketTube: Youtube Subscription Manager sends data to api.mixpanel.com. A widely used service: 38 other extensions we have analyzed send data here.

Updated 2 November 2026amo-908011