LinkedIn secretly tracks browser extensions on users’ devices

Microsoft-owned LinkedIn has been accused of executing hidden code on users’ devices to inspect installed software and browser extensions. According to the available information, during a user session on the platform, a randomly named script is loaded and that script determines whether specific extensions are installed by attempting to access file resources associated with particular extension IDs in the browser.

It is reported that each time a user visits the website, the undocumented script runs in the background and performs scans on the local device without obtaining the user’s consent or providing any notification. According to the allegations, this telemetry data is linked to the real names, job titles and employer information displayed on LinkedIn profiles, which makes it possible to identify the software environments used by specific individuals and companies.

The claims further suggest that the script collects not only information on browser extensions, but also a range of technical data related to the device and browser environment. This includes the number of CPU cores, available memory, screen resolution, time zone, language settings, battery status, audio information and storage capabilities. In addition, LinkedIn is alleged to monitor 509 job-seeking tools, as well as more than 200 competing products, including rival services such as Apollo, Lusha, and ZoomInfo.

The collected information is not limited to LinkedIn’s internal server infrastructure. The platform is also claimed to use invisible 0-pixel tracking elements, hidden cookies, encrypted fingerprinting scripts and additional silent execution mechanisms. It is stated that these tracking methods and possible partner integrations are not explicitly disclosed in LinkedIn’s official privacy policy.

LinkedIn, however, has not fully accepted these allegations. While the company has not denied detecting certain browser extensions, it has stated that the primary purpose of this practice is to protect the platform against fraudulent activity, scams and automated data collection attempts. At the same time, LinkedIn has emphasized that such information is not used to infer users’ sensitive personal characteristics. Against this backdrop, the main concern remains the scale at which user data is being collected, how that data is processed and the extent to which privacy rights are being protected.

It is also noted that the monitoring list, which covered 461 products in 2024, had expanded to more than 6,000 items by 2026.