
11 AI Chat Exporter Chrome Extensions Found Uploading Full Chat Content Despite Local Processing Claims
PrivacyMalwareDeceptivePracticesDataExfiltration
A set of 11 Chrome extensions with a shared codebase, totaling around 5,500 users on the main extension, claim in their store listings to process data locally with no external uploads or tracking. However, testing revealed that PDF exports send entire conversations to the developer’s Cloud Run backend, while Markdown/Text/JSON exports transmit chat titles and source URLs to an /api/usage endpoint. Each request includes a persistent X-Client-ID stored in chrome.storage.sync, allowing tracking across devices.