{"id":92425,"date":"2025-12-19T17:17:16","date_gmt":"2025-12-19T14:17:16","guid":{"rendered":"https:\/\/forklog.com\/en\/?p=92425"},"modified":"2025-12-22T11:01:38","modified_gmt":"2025-12-22T08:01:38","slug":"free-vpn-in-chrome-collected-ai-conversations","status":"publish","type":"post","link":"https:\/\/forklog.com\/en\/free-vpn-in-chrome-collected-ai-conversations\/","title":{"rendered":"Chrome’s Free VPN Collected AI Chat Histories, Report Reveals"},"content":{"rendered":"

Israeli security firm Koi uncovered<\/a> a large-scale data collection operation through a free extension for the Google Chrome browser.<\/p>\n

The VPN service Urban VPN Proxy had about six million users at the time of the investigation and even bore a “recommended” badge in the Chrome Web Store.<\/p>\n

However, in addition to providing the standard service of creating an encrypted connection between a device and the internet, the extension collected data from conversations with leading AI platforms such as ChatGPT, Claude, Gemini, DeepSeek, and Grok.<\/p>\n

According to expert Idan Dardikman, the service sought to obtain any information, including “medical queries, financial details, proprietary code, personal dilemmas.”<\/p>\n

Urban VPN Proxy collected data independently of the VPN’s operation\u2014in real time. The script was enabled by default, meaning it started working as soon as the application was loaded.<\/p>\n

Moreover, there was no button to disable the feature. The only way to stop the data collection was to remove the extension.<\/p>\n

As of December 19, Urban VPN Proxy has been removed from the Google app store.<\/p>\n

\"image\"
Source: Google Chrome app store<\/a>.<\/figcaption><\/figure>\n

The company behind Urban VPN Proxy, Urban Cyber Security, did not hide the fact of data collection\u2014this is stated in the privacy policy:<\/p>\n

\n

“We pass browsing data to our affiliated company, a data broker called BiScience, which uses it to create analytical reports for further commercial use and sharing with business partners.”<\/p>\n<\/blockquote>\n

At the same time, the Urban VPN Proxy page in the Chrome Web Store claimed that “user data is not sold to third parties, except for approved use cases.” They also allegedly “were not used for purposes unrelated to the core functionality of the product.”<\/p>\n

Other Products by Urban Cyber Security<\/strong><\/h2>\n

Forbes found<\/a> seven more applications from the same publisher with over two million users. Each has an identical data collection function using AI. Six of them are marked as “recommended” by Google.<\/p>\n

Dardikman recommends removing extensions from the Chrome Web Store:<\/p>\n