Is Fantasy Hall of Fame League Importer Safe? — Extension Safety Profile

This extension requests host access only to ESPN pages, along with API permissions including cookies, activeTab, scripting, alarms, storage, and sidePanel. In practice, that means it can read and modify ESPN page content when active, store settings, schedule tasks, and access ESPN-related cookies. For a fantasy league importer that reads league data from ESPN, requesting ESPN access and scripting is broadly expected; cookie access is more sensitive because it can involve authenticated session data, so users should be aware of that scope.

The developer's privacy declarations list collection of personally identifiable information, authentication information, web history, user activity, and website content, which is broader than a minimal importer might need. This is a declared disclosure, not evidence of misuse. Fantasy importers and similar tools are often targeted by clones or can overrequest access to league accounts, so a careful user should only install from the official store listing, confirm the publisher name, and review permission and privacy details after updates.

The fact sheet shows Maintenance & Ownership as the strongest dimension, consistent with a recent update and Manifest V3, while Publisher & Identity is the weakest. Overall, the permission scope is understandable for the stated function, but the weaker publisher identity and broad declared data collection are the main points to weigh.