Short answer: PayPal Honey has not been legally found to be spyware or to have stolen affiliate commissions. But its own U.S. privacy statement describes collection of shopping and purchase information, its browser permissions are broad, and creators’ affiliate claims are continuing in federal court. Those facts give privacy-sensitive shoppers a reasonable basis to remove the extension, especially if its automatic coupons are not worth the access and tracking trade-off.
What Honey is and why it has broad browser access
Honey is a free browser extension and shopping service that searches for coupon codes, applies eligible discounts, offers rewards and can connect with PayPal. PayPal acquired Honey in 2020 for approximately $4 billion. Court filings described more than 17 million monthly active users around the acquisition (court filing).
A coupon extension needs to inspect shopping pages and checkout information to test codes or determine whether a reward is available. Browser permissions can therefore include access to page content, cookies, network requests, scripts and local storage. A technical capability is not proof that every kind of data is collected or misused. The useful distinctions are:
- Capability: what the extension’s permissions allow it to do.
- Disclosure: what Honey says it collects and why.
- Observed behavior: what a particular test found in a particular version, browser or account state.
- Legal finding: conduct established after a court resolves the evidence.
What Honey’s U.S. privacy statement says
Honey’s current U.S. privacy statement says it may collect and process information when people use its websites, mobile applications, browser extensions and other services. The listed purchase information includes transaction value and whether an order was completed or returned. Honey says those categories can support internal analytics, commission collection and rewards administration (Honey U.S. Privacy Statement).
#1 Best Overall
- THREAT DETECTION – Stay one step ahead. Suspicious links, risky sites, viruses, and scams, caught automatically before they reach you.
- PERSONAL INFO PROTECTION – Keep your personal info safer. Identity monitoring watches for your exposed info and tells you what to do about it.
- SECURE CONNECTIONS – Just a few easy clicks, and we'll automatically protect your info on public Wi‑Fi, every time you connect.
- GUIDED ACTION – Know what matters and what to do next. Clear alerts and simple guidance make it easy to take action.
- MORE THAN ANTIVIRUS – Scam protection, identity monitoring, VPN, web protection, and antivirus work together to protect you, all in one place.
The same statement describes cookies, pixel tags, web beacons and similar tracking technologies. That means “does not sell personal information to third parties for money,” a company representation also discussed by 9to5Google, should not be read as “collects no data” or “does no tracking.” Collection, analytics, personalization, fraud prevention, rewards accounting and sharing with service providers can exist without a sale of data for money. The U.S. policy also may not match every country, product or historical version.
What the extension can technically access
A federal court’s description of Honey’s permissions includes the ability to query and modify cookies, observe and modify web traffic, execute scripts, access storage and schedule code (November 2025 court order). Such permissions explain why a shopping extension can work across merchant sites, but they do not by themselves establish that Honey read every page, keystroke or private message.
Separate reporting discussed testing in which Honey allegedly transmitted or exposed more information than users expected, including a test involving someone who used the extension without creating a Honey account (9to5Google report). The available material does not independently establish the complete test setup, all affected browsers and versions, how broadly the behavior applied, whether Honey changed it, or what happened to any transmitted data. It is therefore evidence to examine—not proof that Honey universally records everything users do online.
Rank #2
![Norton 360 Deluxe 2027 Antivirus, 5 Devices, Auto-Renews [Download]](https://m.media-amazon.com/images/I/41IYV5zGyCL._SL160_.jpg)
- ONGOING PROTECTION Download instantly & install protection for 5 PCs, Macs, iOS or Android devices in minutes!
- TOP-PERFORMING VPN Faster speeds, more server locations, and greater connection control to protect your privacy across all your devices, including Smart TVs.
- ADVANCED SCAM PROTECTION Help spot hidden scams online. With the built-in Genie AI assistant, you’ll never wonder if a message or email is suspicious again.
- REAL-TIME PROTECTION Advanced security protects against existing and emerging malware threats, including ransomware and viruses, and it won’t slow down your device performance.
- DARK WEB MONITORING Identity thieves can buy or sell your information on websites and forums. We search the dark web and notify you should your information be found.
The affiliate-commission controversy is a separate issue
Creators and publishers allege that Honey could replace or overwrite another marketer’s affiliate identifier shortly before checkout, allowing Honey or PayPal to receive credit for a sale. The practical harm is usually to the creator’s revenue, not the shopper’s price: a buyer may click a creator’s link intending to support that creator, while an affiliate network later attributes the order to Honey.
Free tools Windows power users keep installed
One-click scans. No signup required.
What the complaint alleges
The creators’ second amended complaint alleges that Honey could inject a hidden “Secret Tab,” create a referral-like event and overwrite an affiliate ID, including when a user only dismissed a Honey pop-up (second amended complaint). The court’s June 2026 order summarizes allegations that the conduct could occur even when Honey found no coupon or offered no cash-back reward (June 22, 2026 order).
These are pleaded allegations, not an adjudicated finding. Whether a commission was wrongfully diverted depends on the particular merchant and affiliate-network rules, contracts, user authorization, causation and evidence that Honey actually received money that belonged to a plaintiff.
Rank #3
- THREAT DETECTION – Stay one step ahead. Suspicious links, risky sites, viruses, and scams, caught automatically before they reach you.
- PERSONAL INFO PROTECTION – Keep your personal info safer. Identity monitoring watches for your exposed info and tells you what to do about it.
- SECURE CONNECTIONS – Just a few easy clicks, and we'll automatically protect your info on public Wi‑Fi, every time you connect.
- GUIDED ACTION – Know what matters and what to do next. Clear alerts and simple guidance make it easy to take action.
- MORE THAN ANTIVIRUS – Scam protection, identity monitoring, VPN, web protection, and antivirus work together to protect you, all in one place.
What the courts have actually decided
| Date | Procedural event | What it means |
|---|---|---|
| November 21, 2025 | First amended complaint dismissed with leave to amend. | The court found the pleading had not adequately established standing and causation at that stage; it did not decide the ultimate truth of every allegation. |
| January 5, 2026 | Plaintiffs filed a second amended complaint. | The revised pleading added more specific contractual and conduct allegations. |
| June 22, 2026 | PayPal’s motion to dismiss the second amended complaint denied. | The claims were sufficiently pleaded to continue. This is not a liability, damages or “guilty” ruling. |
In a separate putative consumer case, a February 2026 ruling partly granted and partly denied PayPal’s effort to compel arbitration. The result differed by plaintiff and signup path, showing why the terms and account-creation flow a user accepted can matter (February 23, 2026 arbitration ruling).
How many users has Honey lost?
The decline is reported, but there is no reliable, directly comparable official series. Court filings put Honey above 17 million monthly active users around the 2020 acquisition (court filing). 9to5Google reported approximately 14 million Chrome users in July 2025 (9to5Google). Other online estimates cite different and sometimes much lower totals.
Recommended Free Tools
Those figures should not be subtracted as if they measured the same population. Monthly active users, installed Chrome users, Chrome Web Store counts, mobile users and people using PayPal surfaces are different metrics. Store counts can also be rounded or reported on a different timetable. The defensible conclusion is that Honey has experienced a reported decline, while the exact size is unclear.
Rank #4
- REPAIRS - Finds and fixes over 30,000 different issues using intelligent live updates from iolo Labs to keep your PC stable and issue-free
- PROTECTS - Safely wipes sensitive browsing history and patches Windows security vulnerabilities that can harm your computer
- BLOCKS MALWARE - System Shield is a VB100-certified anti-malware solution that deploys both reactive and proactive malware detection strategies
- PREVENTS SLOWDOWN - System Mechanic deploys a series of complex automated maintenance actions to help keep your PC stable and clutter-free
- RECOVER LOST DATA - Get back accidentally deleted documents, music, photos, email, videos, system files and even entire folders from many types of hard drives, cameras and other devices
Should you uninstall Honey?
Uninstalling is rational if you rarely use automatic coupons, dislike granting an extension access to pages, cookies or network activity, or want to avoid any possibility of affiliate attribution being changed. Keeping it can still be a reasonable personal choice if the discounts or rewards are valuable, you accept Honey’s stated practices, and you understand that the litigation allegations remain unresolved. Neither choice is a security certification.
Remove it and reduce exposure
- Chrome: open the three-dot menu, choose Extensions, select Manage extensions, find PayPal Honey and choose Remove, then confirm.
- For Edge, Firefox, Safari or a mobile browser, open that browser’s current extensions or add-ons manager and remove PayPal Honey; menu labels vary by version.
- Review the browser’s cookies and site-data controls and clear Honey-related data if you want to remove local identifiers.
- Review your Honey and PayPal settings, connected services and rewards balance.
- If a specific purchase followed a creator’s affiliate link, retain the receipt and contact the merchant or creator only when there is a concrete commission or order issue.
Removing an extension does not prove that information previously collected was deleted. Check the current U.S. privacy statement for available privacy-request or account-deletion procedures.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Lower-data ways to find discounts
Manual retailer promotions
Check the merchant’s own promotions page, email offers or publicly available codes. This minimizes additional browser access, but takes more time and may find fewer usable discounts.
Best Value
- MCAFEE TOTAL PROTECTION IS ALL-IN-ONE PROTECTION — delivering award-winning antivirus for 3 devices, with identity monitoring and VPN
- ID MONITORING — we'll monitor everything from email addresses to IDs and phone numbers for signs of breaches. If your info is found, we'll notify you so you can take action
- BANK, SHOP, AND BROWSE ANYWHERE SECURELY WITH UNLIMITED VPN — protect your online privacy automatically when connecting to public Wi-Fi
- SECURE YOUR ACCOUNTS — generate and store complex passwords with a password manager
- AWARD-WINNING ANTIVIRUS — rest easy knowing McAfee will notify you of risky websites and protect you from the latest threats
Cashback portals
Rakuten (official site) and TopCashback (official site) use referral links and purchase tracking. They are not privacy-neutral; compare their policies, payout rules and account requirements before signing up.
Card-linked offers
Bank and card issuers may provide merchant offers inside online-banking or card apps. These can avoid a general-purpose coupon extension, but require trust in the financial institution and may involve transaction-level tracking.
Other shopping extensions
Capital One Shopping offers coupon comparison, price alerts and shopping offers (official site). It is another service with browser access, so review its current permissions and privacy policy rather than assuming it is safer than Honey. Password-manager or browser-native tools can reduce the number of broad extensions, but generally do not replace coupon search.
How to judge any replacement
- What pages, cookies, network requests and storage can it access?
- Is an account required, and what purchase data is retained?
- Does the business rely on affiliate attribution, cashback or rewards?
- Can you request deletion or change tracking choices?
- Which browsers and countries are supported, and are terms different by signup period?
Coupon percentages, merchant eligibility, withdrawal minimums, reward expiration and promotional bonuses change frequently. Verify live terms before relying on them.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →The Bottom Line
Honey is not proven spyware, and PayPal has not been found liable for stealing creator commissions. The documented data disclosures, broad permissions and unresolved affiliate litigation are nevertheless enough for users to reconsider whether automatic coupons justify the trade-off. Removing Honey and using manual offers or a carefully reviewed alternative is the lowest-exposure choice.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
