18
Over 80 Chrome Extensions Found Selling Their Users Data - And It’s All Completely Legal (layerxsecurity.com)
submitted 4 weeks ago* (last edited 4 weeks ago) by Deep@mander.xyz to c/technology@lemmy.world
25 comments fedilink hide all child comments
  • A network of 24 media extensions that are installed on 800,000 users and collected viewing data and demographic information on major streaming platforms such as Netflix, Hulu, Disney+, Amazon Prime Video, HBO, Apple TV, and others
  • 12 separate ad blockers with a combined install base of over 5.5 million users openly selling user data
  • Nearly 50 other extensions, with over 100,000 users in aggregate, that collected and resold users’ browsing data
you are viewing a single comment's thread
view the rest of the comments
[-] Exeous@lemmy.world 2 points 4 weeks ago* (last edited 4 weeks ago)

The largest extensions in the network: 

• Custom Profile Picture for Netflix (200K users)

• Hulu Ad Skipper (100K)

• Netflix Picture in Picture (100K)

• Ad Skipper for Prime Video (60K)

• Netflix Extended (60K)

• Stands AdBlocker (3M users) sells browsing data to third parties for “market analytics purposes.”

•	Poper Blocker (2M users) discloses selling identifiers, browsing activity, behavioral profiles, and inferred sensitive data – including health conditions, religious beliefs, and sexual orientation, all inferred from the URLs you visit.

•	All Block, an ad blocker for YouTube (500K users), sells anonymized data “for analytical and commercial purposes.” Published by an entity called Curly Doggo Limited, based in London.

•	TwiBlocker (80K users) discloses transferring browsing data to third parties who “process or sell it for analytical purposes.”

•	Urban AdBlocker (10K users) routes browsing data and AI conversations through the BiScience data broker.

•	Career.io Job Auto Apply (10K users) states in its policy that it may use personal data collected from your resume to sell to third parties, including data brokers, for targeted advertising and profiling. A job application tool that sells your resume.

•	Dog Cuties (6K users) is a cute dog wallpaper new-tab extension. Confirmed data seller through the Apex Media network.

•	EmailOnDeck (10K users) is a temporary email service – a tool people use specifically when they don’t want to share their real information. Its policy states it may sell, rent, or share its mailing list.

•	Survey Junkie discloses selling URLs visited, clickstream data, and “modeled information” about consumer preferences to market research agencies, ad agencies, and data analytics providers.

• Dashy New Tab (10K users) has its Chrome Web Store listing marked “does not sell your data.” Its actual privacy policy marks data as “Sold or Shared: Yes.” We believe this is CCPA compliance language for standard analytics, not commercial data sales – which is why we left it out. But the contradiction between the store listing and the privacy policy is real. If a publisher’s own policy says “Sold or Shared: Yes” and the store listing says the opposite, which one should users trust?

this post was submitted on 29 Apr 2026
18 points (100.0% liked)

Technology

84941 readers
833 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 3 years ago
MODERATORS
L3s@lemmy.world
enu@lemmy.world
technopagan@lemmy.world
L4s@lemmy.world
L3s@hackingne.ws