Is Transtore safe?

Medium risk

Transtore fetches remote rules from storefront.transtore.app and injects configured HTML into matched sites.

Its content script runs on all sites except myshopify.com, asks storefront.transtore.app for encrypted configuration, and inserts the supplied HTML when a rule matches the current domain. The extension also reports matched-site visits back to the same host with its extension ID as an authorization token, and its background rule removes CSP and frame-protection headers from main frames and subframes.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Transtorev1.31Chrome Web Store
42Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.31. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    <all_urls>

  • Block and redirect the requests your browser makes

    declarativeNetRequest

  • See which of your requests its blocking rules matched

    declarativeNetRequestFeedback

declarativeNetRequestWithHostAccess

Where it sends data

Destinations our analysis observed Transtore contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • storefront.transtore.app

    Transtore sends data to storefront.transtore.app. No other extension we have analysed sends data here.

Updated 21 September 2026bcgbghlhkkhcimckjabgomapgommajen