Is ONESTORE safe?

Clean risk

ONESTORE reads LINE Official Account CSRF cookies to list chat contacts and send bulk messages.

The extension page reads LINE Official Account session tokens (bp_token_csrf and XSRF-TOKEN) through the cookies API every 500ms. It uses them to fetch chat threads and contacts from LINE Official Account Manager and to send bulk broadcast messages. The tokens are only used against LINE hosts.

0Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed ONESTORE contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • manager.line.biz

    ONESTORE sends data to manager.line.biz. No other extension we have analysed sends data here.

Updated 15 October 2026chifjobcbpgkhpelfphbhjmkcggfejmd