Is Copy Text from Picture safe?

Question

Accepted Answer

Copy Text from Picture is high risk. When you use Copy Text from Picture to select an area of the screen, the extension captures that region and uploads the image to copytextfrompicture.xyz for OCR. The recorded mechanism sends the cropped screenshot blob as multipart/form-data to the vendor endpoint, so page text or visual content inside the selected region leaves the browser for processing. Copy Text from Picture loads a Sentry session-replay recorder into every website you visit, not only pages where you use its OCR feature. Our dynamic analysis confirmed this directly: on two independent test runs, simply navigating to a page (Wikipedia articles, in our tests) produced a request from the extension to its developer's own server, copytextfrompicture.xyz, whose compressed body decompressed to a recording of that exact page - the URL, the page title, and the page's DOM structure. This starts as soon as the page loads and only skips a page if the extension's OCR feature has been turned off in its own settings or the tab isn't the one currently focused in the browser - otherwise every page you look at is recorded and sent. 1 further issue was flagged.

Is Copy Text from Picture safe?

Findings