Krowded Chrome extension security report

Krowded Connector is the companion extension for Krowded (https://getkrowded.com), an event outreach platform for DJs, promoters, and venues. An active Krowded subscription is required to use this extension. PURPOSE This extension connects your Instagram account to the Krowded dashboard at user.getkrowded.com. Once connected, you can create and manage personalised Instagram DM campaigns through the Krowded platform. HOW IT WORKS Log into Instagram in Chrome. Click the Krowded Connector icon in your toolbar. Click "Sync Profile" and then "Approve & Connect" to authorise the connection. Your Instagram session is synced to the Krowded dashboard, where you can create and manage outreach campaigns. The connection uses your existing Instagram browser session. You can disconnect at any time by clicking "Clear & Restart" in the extension popup. DATA HANDLING When you click "Approve & Connect," this extension reads your Instagram session cookies from Chrome and transfers them to user.getkrowded.com. This allows the Krowded platform to authenticate your Instagram account and send messages on your behalf. Specifically, this extension: Reads Instagram session cookies from your Chrome browser when you initiate a connection. Stores the session data locally in Chrome (chrome.storage.local) so you don't need to reconnect each session. Transfers the session data to user.getkrowded.com via the content script when you click "Insert into Page" or during the initial connection. Briefly opens an Instagram tab in the background after connection to refresh your session, then closes it automatically. No data is collected in the background. No data is transmitted until you explicitly click "Approve & Connect." You can clear all stored data at any time from the extension popup. For full details on how your data is handled, see our privacy policy: https://getkrowded.com/privacy REQUIREMENTS An active Krowded subscription at https://getkrowded.com Google Chrome browser An Instagram account logged in within Chrome PERMISSIONS USED cookies — to read your Instagram session for authentication with Krowded. storage — to save your session locally so you don't need to reconnect each time. tabs — to refresh your Instagram session after connecting. Host access to instagram.com — required to read session cookies from Instagram. Content script on user.getkrowded.com — to deliver session data to your Krowded dashboard. SUPPORT Email: ilan@getkrowded.com Website: https://getkrowded.com