Is Paint Tool for Chrome safe?

Medium risk

Paint Tool for Chrome saves your drawings and text into each website's localStorage when you use its overlay.

When you activate the paint overlay on a page, the extension serializes the canvas as a data URL and stores it in that page's localStorage. Because the storage is tied to the website origin rather than Chrome extension storage, scripts from the same site can read the saved drawing or text on sites where you use the tool.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Paint Online App.v1.1.9Chrome Web Store
45Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.1.3. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to. The current listed version is 1.1.9, which we have not unpacked yet.

  • Read and change your data on every site you visit

    *://*/*

  • Act on the current tab, but only after you click the extension

    activeTab

  • Store data in your browser

    storage

  • Run its own code inside the pages you visit

    scripting

Updated 30 September 2026coabfkgengacobjpmdlmmihhhfnhbjdm