Is DeepL safe?
DeepL sends selected page text and editable-field text to DeepL translation and writing APIs after user action.
When you ask DeepL to translate or improve writing, the extension reads the selected page text or text from an input field and sends it with the current site hostname to DeepL. This applies on pages where the extension runs, including regular websites, and the request goes to DeepL's translation service.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 2.10. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on every site you visit
<all_urls> and 1 more
Schedule its own background tasks
alarms
Act on the current tab, but only after you click the extension
activeTab
Store data in your browser
storage
Add items to the right-click menu
contextMenus
See the address and title of every tab you have open
tabs
Run its own code inside the pages you visit
scripting
Sign you in with your Google account
identity
Watch every request your browser makes
webRequest
Watch, block and rewrite every request your browser makes
webRequestBlocking
Block and redirect the requests your browser makes
declarativeNetRequest
Where it sends data
Destinations our analysis observed DeepL contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- www2.deepl.com
DeepL sends data to www2.deepl.com. 2 other extensions we have analysed send data here.