Security & Permissions
Last updated: August 7, 2026
Browser extensions that handle TikTok content have earned real scrutiny. In 2025, security researchers documented a campaign in which a group of TikTok "downloader" extensions behaved normally for months and then began exfiltrating user data through remotely delivered code. Anyone evaluating a tool in this category is right to ask hard questions first.
This page answers those questions for AI TikTok Analyzer Pro with claims you can verify yourself, rather than assurances you have to take on trust.
What the extension asks for, and why
| Permission | Why it is needed |
|---|---|
tabs | To tell whether the page you are on is a TikTok page, so the interface only appears where it applies. |
storage | To keep your settings and sign-in state locally in your browser. |
sidePanel | To render the extension's own side panel. |
*://*.tiktok.com/* and the TikTok CDN domains | To read the public page you are already viewing and to fetch media you have chosen to save. |
*://*.tiktok.poviai.com/* | Our own backend, used for transcription, translation and AI analysis. |
That is the complete list. The extension requests no access to your browsing history, no access to sites unrelated to TikTok, no clipboard access, and no cookie access beyond the domains above.
No remote code, ever
The mechanism behind the 2025 campaign was remotely delivered code: an extension ships clean, passes review, and later pulls executable instructions from a server it controls.
AI TikTok Analyzer Pro cannot do this, and you can confirm it three ways:
- The published package contains no
eval()and noFunctionconstructor. Our build refuses to produce a package that does. - The manifest declares
"content_security_policy": {"extension_pages": "script-src 'self'; object-src 'self'"}, which forbids loading executable script from anywhere but the package itself. - The extension loads no script from any domain other than our own backend.
Verify it yourself
You do not have to take our word for any of the above. Every published package is available
as a downloadable zip with a SHA-256 checksum on our
releases page.
Download it, unzip it, and read manifest.json and the files in assets/.
What ships is what you see; there is no build step that transforms the source into something else.
What we do with your data
- Media you download goes from the source to your machine. We do not archive your downloads.
- Transcription, translation and AI analysis are processed on our backend to produce the result you asked for. Details of retention are in our Privacy Policy.
- We do not sell user data, and we do not embed third-party advertising or analytics trackers in the extension.
Scope and limits
AI TikTok Analyzer Pro works only with publicly visible TikTok content. It cannot access private accounts, hidden comments, or anything behind a login that is not yours. It is an independent product and is not affiliated with, endorsed by, or sponsored by TikTok or ByteDance.
Downloading is available for content you are authorized to use. Rights in creator content belong to the creators; you are responsible for how you use anything you save.
Reporting a problem
If you believe you have found a security issue, email support@poviai.com with the details. We will respond and, where a fix is warranted, ship it and say so publicly.
AI TikTok Analyzer Pro Team
Contact: support@poviai.com
Website: https://tiktok.poviai.com