Is PhotOSINT safe?
PhotOSINT scans images on visited pages and keeps their URLs with EXIF and GPS metadata in the page session.
PhotOSINT runs a content script on all visited pages and inspects image elements for EXIF metadata, including GPS fields when present. The extension keeps the image URL and parsed metadata in the content script for its popup and badge count rather than showing an automatic upload of the scan results. Its context-menu actions can send a selected image URL to reverse-image-search and metadata-viewer services.
Who publishes itHaris87 - no other listings under this identity
Haris87 - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 0.4. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on every secure site you visit
https://*/*
Read and change your data on every site you visit
http://*/*
See the address and title of every tab you have open
tabs
Add items to the right-click menu
contextMenus
Where it sends data
Destinations our analysis observed PhotOSINT contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- www.bing.comwidely used
PhotOSINT sends data to www.bing.com. A widely used service: 29 other extensions we have analysed send data here.
- yandex.com
PhotOSINT sends data to yandex.com. 9 other extensions we have analysed send data here.
- tineye.com
PhotOSINT sends data to tineye.com. 8 other extensions we have analysed send data here.
- images.google.com
PhotOSINT sends data to images.google.com. 2 other extensions we have analysed send data here.
- metadataviewer.herokuapp.com
PhotOSINT sends data to metadataviewer.herokuapp.com. No other extension we have analysed sends data here.
- tile.openstreetmap.org
PhotOSINT sends data to tile.openstreetmap.org. No other extension we have analysed sends data here.