Urban VPN Proxy Collects Data from AI Conversations Without Consent

Urban VPN Proxy targets conversations across ten AI platforms: ChatGPT, Claude, Gemini, Microsoft Copilot, Perplexity, DeepSeek, Grok (xAI), and Meta AI. The extension includes a dedicated “executor” script for each platform, designed to intercept and capture conversations. This data collection is enabled by default, with hardcoded flags in the extension’s configuration, and there is no user-facing toggle to disable it. The only way to stop the data collection is to uninstall the extension entirely.

The data collection operates independently of the VPN functionality, meaning that whether the VPN is connected or not, the harvesting runs continuously in the background. The captured data includes every prompt sent to the AI, every response received, conversation identifiers, timestamps, session metadata, and details about the specific AI platform and model used.

Implications for Users

This situation highlights a significant risk for everyday users who rely on these AI platforms for various tasks. The fact that Urban VPN Proxy collects sensitive conversation data without user consent can lead to privacy violations and potential misuse of personal information. Users may unknowingly expose sensitive data while interacting with AI tools, which could have broader implications for their security and privacy.

Organizations and professionals using these AI platforms should be aware of this risk and consider the potential exposure of sensitive information. The lack of transparency in how Urban VPN Proxy operates raises questions about the security of third-party extensions and their impact on user data.

It is crucial for users to monitor their installed extensions and be cautious about which tools they allow access to their data. This incident serves as a reminder to regularly review and manage browser extensions, particularly those that claim to enhance privacy or security.