Is FoE - Helper safe?

Medium risk

FoE - Helper sends Forge of Empires player and guild identifiers to api.foe-rechner.de when the game starts.

On Forge of Empires pages, the extension's startup handler collects your player ID, user name, portrait ID, clan ID, world, guild ID, and extension version and posts them as JSON to api.foe-rechner.de. This upload is tied to the "Upload/Send data to foe-helper.com" setting, which ships enabled by default and can be disabled in the extension settings.

mainlinev4.8.2.4Chrome Web Store
45Risk
Who publishes it

mainline - no other listings under this identity, 11 shared hostnames

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
mainline
Registered address
Neuruppiner Str. 5, Erfurt, Deutschland 99091, Deutschland
Registered contact
Daniel Siekiera

Shared hosts - 11 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

api.foe-rechner.de
Also called by 2 other listings, including FoE - Helper
calculador-foe.es
Also called by 2 other listings
docs.foe
Also called by 2 other listings, including FoE - Helper
docs.foe-helper.com
Also called by 2 other listings, including FoE - Helper
foe-helper.com
Also called by 2 other listings
i18n.foe-helper.com
Also called by 2 other listings, including FoE - Helper
foede.innogamescdn.com
Also called by 3 other listings
forgeofempires.fandom.com
Also called by 3 other listings
vdw.staytuned.gr
Also called by 3 other listings
foestats.com
Also called by 4 other listings
foe.scoredb.io
Also called by 5 other listings

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

SeverityMEDIUM
ClassUNWANTED
TypeUnexpected
CWECWE-359
SourceAI SANDBOX

Player profile sent to api.foe-rechner.de by default

Loading a Forge of Empires page while logged in makes the extension read your player ID, username, portrait ID, guild ID and POST them to api.foe-rechner.de/SelfPlayer/.

Runs every load; the setting names foe-helper.com but sends elsewhere.

01EvidenceCAUSE EFFECT
What actually happens
You did this

You open a Forge of Empires world page while logged into your game account.

No interaction with the extension's own interface is required.

The extension did this

The extension reads your player ID, username, portrait ID, and guild ID from the game's startup data and uploads them to a third-party API.

The upload fires automatically because the controlling setting ships enabled by default.

02EvidenceFIELD TABLE
Fields included in the SelfPlayer upload
FieldValueWhy it matters
Player ID
856644665A number that uniquely identifies your Forge of Empires account.
In-game username
EmpireBuilder92 (illustrative)The display name on your account. Players often reuse a recognizable handle across sites, which can tie this profile to you elsewhere.
Portrait ID
portrait_id_4The avatar image code shown on your in-game profile.
Guild ID
undefined (no guild) or a numeric guild IDThe identifier of the guild (clan) you belong to, if any.
World and extension version
world=en11&v=4.6.0.0Which game server (world) you play on and which helper version you're running, sent as URL query parameters rather than in the request body.
03EvidenceNETWORK CAPTURE
Captured request
POSThttps://api.foe-rechner.de/SelfPlayer/?player_id=856644665&guild_id=undefined&world=en11&v=4.6.0.0
200 OK, {"status":"OK","process":"0 record processed"}
Headers
Content-Typeapplication/json
Body
{
  "player_id": 856644665,
  "user_name": "EmpireBuilder92",
  "portrait_id": "portrait_id_4"
}
04EvidenceTHIRD PARTY LIST
Where the upload goes
  • api.foe-rechner.de

    Receives your player ID, username, portrait ID, and guild ID on every load when GlobalSend defaults on. Different domain from foe-helper.com, the site named in the setting's label.

05EvidenceTEMPORAL PATTERN
When this fires
On every browser startup

Fires once per Forge of Empires session, immediately after the game's own startup data loads, no click, save, or other action is required beyond opening the page.

Where it sends data

Destinations our analysis observed FoE - Helper contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • api.foe-rechner.de

    FoE - Helper sends data to api.foe-rechner.de. 2 other extensions we have analysed send data here.

Updated 30 September 2026bkagcmloachflbbkfmfiggipaelfamdf