AI 产品解读Enterprise browser telemetry and digital equity data collection agent for K-12 schools
School districts need visibility into which educational technologies and websites students use, how much time they spend on them, and the quality of internet connectivity — to make data-driven decisions about technology investments and ensure digital equity across the student population
The extension is deployed to student/staff Chromebooks via enterprise policy. It runs as a background service worker that tracks active tab URLs, monitors user interactions through a content script injected on all pages, and periodically sends telemetry payloads to Lightspeed Systems' CatchOn API (agent.catchon.com). On Windows/Mac, it connects to a native CatchOn agent via localhost WebSocket to synchronize device and user identifiers. An EntitlementKey provisioned through managed storage authenticates the device. Configuration (collection intervals, PII settings, speed test parameters) is fetched from the CatchOn agent config API. The extension has no user-facing functionality — the popup is informational only. Data is consumed by school administrators through the Lightspeed Digital Insight web dashboard.
URL activity tracking with time intervals per website visitedUser interaction monitoring (clicks, keystrokes, scrolls, video playback detection)Internet speed testing via client-side WASM moduleGeolocation collectionDevice inventory (CPU, memory, storage, OS, serial number)PII collection (email, username, domain) when configured by admin
- 目标用户
- School district IT administrators (deployment and configuration) / Educational technology directors and administrators (data consumers) / K-12 students and staff (passive data subjects - extension runs in background)
- Cannot verify whether the CatchOn web platform (my.catchon.com) has its own login or paid tiers without inspecting that service
- Cannot confirm if the extension stops functioning entirely when the EntitlementKey is invalid or missing
- The client.wasm binary could not be analyzed for additional functionality
付费分析未识别到付费功能
The extension itself contains no payment UI, subscription logic, billing APIs, premium/upgrade gates, or Stripe/payment integration. The 'pro' keyword hits are false positives from variable names like 'process', 'profile', 'Promise', 'speedTestInProgress', and 'Processor'. However, Lightspeed Digital Insight is a commercial B2B product sold to school districts. The EntitlementKey (managed via chrome.storage.managed) is a license key provisioned by the school's IT admin. This is an organizational subscription to the Lightspeed Systems platform, not individual user paid features. The extension is a data collection agent with no user-facing monetization.
- 置信度
- 80
- 支付平台
- --
- 来源
- AI / 高
- 需要登录
- 是
- 登录理由
- The extension requires the Chrome browser profile to be signed into a Google account. getProfileData() in js/identity.js (line 14) calls chrome.identity.getProfileUserInfo and rejects with a CriticalError if no email is found (line 16-18: 'Profile email could not be identified. No signed-in profile detected.'). The hashed email is used as the UserId for telemetry. Additionally, the extension requires an EntitlementKey provisioned via Chrome enterprise managed storage (schema.json), meaning it must be deployed by an IT administrator. No individual login UI exists in the extension itself.
My school has this but I bypassed it and now I can play games
made me feel suicide after the camera turned on and tracked my location. pedophile ahh filter trying to stalk. get this off my computer. I need mental help.
I hate this so much like actually my school admin installed this and I can't even play games. 1 star.
Not good
my school installed this, and now all my extensions are gone, "Lightspeed Insight is a comprehensive data analytics tool that provides administrative leaders a window into the efficacy of their technology investments and integrations." no the only thing you do is hide all extensions from us, you dont do anything else other than hide all extensions. its also most likely a RAT extension and should be removed from the chrome web store
who thinks i should feed this to COPPA
horrible I hate and ts sucks and my teachers are always omd because of this poverty company I hate yall why cant u just let me play Minecraft . I cry every night because of this they also blocked femboy websites are you serius 0 stars if I could! they also blocked the software on my Bluetooth butt plug
not good, wouldn't recommend; the FBI pulled up on my house because they saw I had the extension installed.
my old school did not have this allat bru💔💔💔 Its good that I'm going back to my old school at 8th grade
A terrible extension, they know exactly what they are doing. The final data data broker; the embodiment of a RAT, a Trojan virus, used to collect students data across a huge majority of schools, and yet, despite of those facts there have been no attempt for anyone to speak up about the unethical ways this extension operates and deals with possibly millions upon millions of student (as in MINORS!) data. The worst part is that they themselves are fully aware of what they are doing - how do I know this? Well, a quick glance on this website: chrome-extension://adkcpkpghahmbopkjchobieckeoaoeem/relay_license.txt (the extensions license) literally says that "In no event and under no legal theory, whether in tort (including negligence), contract, or otherwise [skipping a few parts here] - "shall any Contributor be liable to You for damages". Now the big question you are probably asking is what does this mean? Well, its basically saying that they themselves are not responsible, nor the Schools, shall be held "liable to You for damages", in any shape or form. Meaning that legally, you cant sue them. Which, now your thinking "Hm... but I never agreed with those terms... " - but you did (atleast for my county) You see, every single school requires you to sign a TOS form. The TOS is further expanded by stuff like "policies" ('Policies' in this context are either legally bounded, or set up by the school sort of rules and regulations). Now, after searching my schools policies I found that this is mostly all legal. The schools have technically ever right to store your data - and you, the user, apparently have no "right or expectation of privacy" "including but not limited to "to browsing activity and email or materials sent." What I also found is that my county has the right to store my sensitive data on a local device, the only regulation they need to follow is to encrypt said data. Now, I am getting of topic, our focus is the lightspeed. And what I have found is a whole lot of nothing (in the context of my county's online policies). Now, is lightspeed taking and storing our data? Selling it to Russia and Iran? I don't know. I did see a comment about someones data getting completely stolen off from just signing in but that's that. The problem is that its supposedly your responsibility to check for your data, as a pupil (5-18 years of age). Which, expecting minors to have to go out of their way to see if they data is being sold of because of negligence from their county's school or this extension is horribly unethical. So, lets recap: Lightspeed, and its contributors (being the schools in this context), are not responsible for how a pupils data is handled, or whatever mishaps come up from lightspeed and its contributors negligence. You, as a pupil, have no right of privacy, and schools can collect your sensitive data, and store it on a local device, the only rule is that said data needs to be encrypted. These schools purposefully hide these details in their terms of use, they implement the use of a loophole, they know that your parents aren't going to care about Lightspeed collecting their data, infact, all of them are unaware that this exists. And, to make it worse, finding these details are even harder when these policies are filled with repeated information to increase the length of the PDF, discouraging any users of reading the agreement terms/policies, and effectively causing almost everyone to miss these important details about how there data is being used. The ways to destroy it: 1 - Go against your TOS and use proxies, VPNs, or do the extension Ctrl+p glitch. 2 - Gather concrete evidence that Lightspeed is improperly storing and handling your data, and prove that they are a data broker. And then contact your schools cyber security department, provide this information, and wait for a response (which most wont happen because you are a minor). I hope you can use my review to prove the unethical use of this extension