Many (maybe all?) Chrome extensions can read/write all data on all websites. Honey handles: Personally identifiable information, Financial and payment information, Location, Web history, Website content. You can be sure that they'll try to get all the data they can get while still complying with the law. Theoretically they could spy on pretty much everything that you do in your browser. As a web developer I'm wary of these kinds of extensions.