Is Annotate.tv safe?

Low risk

Annotate.tv lets localhost web pages request a base64 screenshot of the active visible tab.

Pages allowed by the extension manifest, including annotate.tv pages and http://localhost, can send a GET_BASE_64 message to the extension. The extension responds with a data:image base64 screenshot from chrome.tabs.captureVisibleTab, and the handler does not limit the captured tab to YouTube or Vimeo.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

matiastucciv0.0.0.8Chrome Web Store
17Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 0.0.0.8. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on youtube.com

    *://*.youtube.com/*

  • Read and change your data on vimeo.com

    *://*.vimeo.com/*

  • Read and change your data on annotate.tv

    *://*.annotate.tv/*

  • Read and change your data on every site you visit

    <all_urls>

Where it sends data

Destinations our analysis observed Annotate.tv contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • annotate.tv

    Annotate.tv sends data to annotate.tv. No other extension we have analysed sends data here.

  • localhost

    Annotate.tv sends data to localhost. Named as a recipient by 11 other extensions we have analysed.

Updated 30 September 2026mepbiloikmgpehamobkanmcllidclden