Is Netflix Picture in Picture now for Prime & D+ [QVI] Safe? — Extension Safety Profile

The extension requests the "scripting" and "storage" permissions along with host access to a list of major streaming platforms like Netflix, Disney+, and Hulu. These permissions allow it to inject its picture-in-picture feature directly into those sites and save your preferences. For a tool that modifies the video player on specific services, this access is fairly narrow and expected within its category, though the list of declared data collected (including location and user activity) is broader than what a minimal PiP helper would need.

As with any browser extension that interacts with streaming accounts, a careful user should be aware that it can see what you do on those sites, including potentially what you watch. Extensions in this general category often get flagged if they unexpectedly collect browsing data or use affiliate injection, but this one declares its data handling upfront. Users should check the publisher’s privacy policy to understand why location or authentication information is collected for a picture-in-picture feature.

The strongest safety dimension for this extension is Maintenance & Ownership, indicating that it is actively updated and unlikely to be abandoned. The weakest is Publisher & Identity, which suggests limited publicly available information or trustworthiness about the developer "ToopExt", so it's harder to verify who is behind the code. Overall, its permissions match its stated purpose, but the gap in publisher transparency and the broad data collection scope warrant a cautious approach.