Is Lightshot (screenshot tool) safe?

Lightshot sends screenshot image data to its upload server over unencrypted HTTP.

When a user uploads a screenshot, Lightshot transmits the image as a binary POST to http://upload.prntscr.com over plain HTTP, with no transport encryption. The upload URL is hardcoded in the extension and includes a timestamp and an MD5-derived hash used only for path generation. On first upload, the extension also sends the user's OS and CPU architecture to the Lightshot API at api.prntscr.com along with a per-device identifier.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.