Let’s start with the basics. Chrome extensions add extra features not built into Chrome, like ad blocking, translations and one-click full-page screenshots.
Just like apps on your phone, extensions request permissions to track what you do, see and share online. But many extensions get far more access than they need and collect data way beyond their intended purpose. And that’s when you’re at risk of identity theft, scams and data harvesting.
The tracking runs deep
The folks at Incogni analyzed 238 popular Chrome extensions that sell themselves as AI-powered. A staggering 67% of the extensions they reviewed collect user information.
On average, each one requests three shady permissions and 41% gather personally identifiable details like your name, address, email and other sensitive data.
What bad extensions do
I like to keep things simple, so rather than giving you programming know-how, here are a few examples of what bad Chrome extension permissions can do.
activeTab: You install a coupon extension that applies discount codes. But in the background, it could also read what you're typing into checkout forms, including your email and credit card details.
Scripting: A grammar-checking extension highlights mistakes as you type. But it could also modify webpages you visit, adding pop-ups, changing links or injecting malicious ads.
all_urls: A productivity extension claims to block distracting websites. But because it has access to all sites, it’s secretly logging your browsing history, even on your bank and email accounts.
webRequest: You install an ad blocker to remove annoying pop-ups. If it's shady, it’s capturing everything you do online, including login details and payment info, or rerouting you to fake sites.
These AI extensions are the worst
Al translator and writing assistant, developed by DeepL: It collects your “personal communications” like emails and chats (yikes!), location, web history, network info, and what you’ve interacted with on a website.
Al Grammar Checker & Paraphraser - LanguageTool, developed by LanguageTooler GmbH: This one collects your communications, too, plus payment info, your name and address, and your user activity. That’s everything from where your mouse went to what you typed.
Sider: ChatGPT Sidebar + GPT-40, Claude 3.5, Gemini 1.5 & Al Tools, developed by Vidline Inc.: It collects identifying info like your name and address, plus details about all the websites you visit.
But wait, there’s more
I’d remove these if you have them on your system, too.
QuillBot: Al Writing and Grammar Checker Tool, developed by QuillBot Grammarly: Al Writing and Grammar Checker App, developed by Grammarly Monica - Your Al Copilot powered by ChatGPT4, developed by BUTTERFLY EFFECT PTE. LTD. ChatGPT for Google (it’s not the official ChatGPT but a rip-off), developed by BUTTERFLY EFFECT PTE. LTD. AIPRM for ChatGPT, developed by AIPRM, Corp. Superpowers for Chatgpt, developed by someone identified only by email address ‘Kim, how the heck do I check my extensions?’
Glad you asked. In Chrome, click the puzzle piece icon next to the URL bar, then hit Manage Extensions to review and delete any you don’t trust. In Safari, hit the Safari menu > Settings (or Preferences), then Extensions.
Here’s the real problem. Deleting shady extensions is just one piece of the puzzle. Your data is already out there, being bought and sold by data brokers, people-search sites, insurance companies, marketing outfits and scammers.
That’s where Incogni comes in. While these extensions make money off your private data, Incogni fights back, removing your info from the internet, data brokers and people-search sites automatically.
If you’re serious about protecting your privacy, don’t just clean up your browser. Clean up your entire digital footprint. It’s easy, it works, and it’s one of the smartest privacy moves you can make.
✅ Hit my link for 60% off. You’ll be glad you did. I sure am.