Is EditThisCookie2 safe?

Low risk

EditThisCookie2 loads Google Analytics JavaScript in its privileged background page.

EditThisCookie2 registers a background script that creates a remote Google Analytics script element from ssl.google-analytics.com. Because the background page also has access to cookies, tabs, storage, and all URLs, that remote script runs in a privileged extension context.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Timuxv1.5.0Firefox Add-ons
20Risk
Who publishes it

Timux - no other listings under this identity, 1 shared hostname

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Timux

Shared hosts - 1 hostname

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

getlocalization.com
Also called by 3 other listings, including EditThisCookie (V3)

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.5.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    <all_urls>

  • See the address and title of every tab you have open

    tabs

  • Read and change cookies, including the ones that keep you signed in

    cookies

  • Add items to the right-click menu

    contextMenus

  • Store an unlimited amount of data in your browser

    unlimitedStorage

  • Show you desktop notifications

    notifications

  • Store data in your browser

    storage

  • Write to your clipboard

    clipboardWrite

Where it sends data

Destinations our analysis observed EditThisCookie2 contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • ssl.google-analytics.com

    EditThisCookie2 sends data to ssl.google-analytics.com. 12 other extensions we have analysed send data here.

Updated 30 September 2026amo-2610796