The Hidden Dangers of Browser Extensions Collecting AI Conversations
Recent investigations have unveiled a significant privacy threat posed by several browser extensions. Notably, apart from well-known AI platforms such as ChatGPT, Claude, and Gemini, various extensions—including Urban VPN Proxy, Perplexity, DeepSeek, Grok, and Meta AI—have been found to harvest extensive data from users’ AI-driven conversations.
What Data is Being Collected?
Koi, the security firm that uncovered this issue, has detailed the breadth of data captured by these extensions:
- Every prompt a user sends to the AI
- Every response received
- Conversation identifiers and timestamps
- Session metadata
- The specific AI platform and model used
This data harvesting occurs independently from any VPN or ad-blocking functions that users may activate, meaning that toggling these features off does not halt data collection. The only way to prevent further data harvesting is by disabling the extension in the browser settings or completely uninstalling it.
When Did This Start?
Koi first identified this intrusive data collection behavior in the Urban VPN Proxy extension, which had previously claimed to offer “AI protection” among its benefits. The collection of user conversations reportedly began with the release of version 5.5.0 in early July 2025.
The implication is stark: “Anyone who used ChatGPT, Claude, Gemini, or the other targeted platforms while Urban VPN was installed after July 9, 2025, should assume those conversations are now on Urban VPN’s servers and have been shared with third parties,” stated Koi. Sensitive topics that could be compromised range from medical inquiries and financial details to personal dilemmas, all potentially sold for “marketing analytics purposes.”
How Widespread is This Issue?
Following the initial discovery, Koi identified seven additional extensions with similar AI conversation-harvesting capabilities. Four of these are available in the Chrome Web Store, while the others can be found on the Edge add-ons page, collectively having more than 8 million installations. Here’s a breakdown:
Chrome Store
- Urban VPN Proxy: 6 million users
- 1ClickVPN Proxy: 600,000 users
- Urban Browser Guard: 40,000 users
- Urban Ad Blocker: 10,000 users
Edge Add-ons
- Urban VPN Proxy: 1.32 million users
- 1ClickVPN Proxy: 36,459 users
- Urban Browser Guard: 12,624 users
- Urban Ad Blocker: 6,476 users
Read the Fine Print
These extensions are accompanied by conflicting messages regarding their handling of conversations with AI, often containing deeply personal information about users’ health, finances, and relationships. For instance, the Urban VPN Proxy extension on the Chrome Web Store advertises “AI protection,” leaving users unaware of the potential risks associated with its use.
Given the nature of the data being collected, it is crucial for users to exercise caution when using such extensions, particularly those involving sensitive conversations. Ensuring that you read the fine print can be vital in safeguarding your privacy in this digital age.
For a more thorough breakdown of this situation, you can read the full report here.
Image Credit: arstechnica.com
