Is TxtAnalyser safe?

Low risk

TxtAnalyser sends the Google Docs document URL, pseudonymized user email, and device metadata to Google Analytics on each interaction.

Each time a user activates the extension or changes a grammar setting, it collects the full Google Docs URL (including document ID), a SHA-256-pseudonymized email address, a persistent random client ID, and device details such as timezone, screen resolution, OS, and browser version. These are POSTed to Google Analytics 4 via a hardcoded Measurement Protocol endpoint using a private API secret. The document URL is sent as an event parameter, linking browsing sessions to specific documents.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Wizkids A/Sv2.3.8Chrome Web Store
20Risk
Who publishes it

Everway A/S - 4 other listings from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Wizkids A/S
Declared legal entity
Everway A/S
Registered address
Roskildevej 8, Albertslund 2620, DK
Registered contact
Everway A/S

Same store account

1 other listing published from this account, 400k+ users between them, none of them carrying a finding.

Same operator - 3 listings

Published under a different store account, but sharing the registered address, contact or declared legal entity this one gave the store.

Shared hosts - 2 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

account.wizkids.dk
Also called by 1 other listing: MathSolver
services.lingapps.dk
Also called by 2 other listings: MathSolver, LexiFlow

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 2.3.1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to. The current listed version is 2.3.8, which we have not unpacked yet.

  • Read and change your data on lingapps.dk

    *://*.lingapps.dk/*

  • Read and change your data on wizkids.dk

    *://*.wizkids.dk/*

  • Read and change your data on wizkids.tech

    *://*.wizkids.tech/*

  • Read and change your data on accounts.google.com

    *://*.accounts.google.com/*

  • Read and change your data on docs.google.com

    *://*.docs.google.com/*

  • Read and change your data on onedrive.live.com

    *://onedrive.live.com/*

  • Read and change your data on sharepoint.com

    *://*.sharepoint.com/*

  • Read and change your data on officeapps.live.com

    *://*.officeapps.live.com/*

  • Read and change your data on sso.emu.dk

    *://sso.emu.dk/*

  • Read and change your data on atlas.uni-login.dk

    *://atlas.uni-login.dk/*

  • Read and change your data on broker.unilogin.dk

    *://broker.unilogin.dk/*

  • Schedule its own background tasks

    alarms

  • See the address and title of every tab you have open

    tabs

  • See every page you navigate to, as you navigate to it

    webNavigation

  • Watch every request your browser makes

    webRequest

  • Block and redirect the requests your browser makes

    declarativeNetRequest

  • Store data in your browser

    storage

  • Run its own code inside the pages you visit

    scripting

Where it sends data

Destinations our analysis observed TxtAnalyser contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • www.google-analytics.comwidely used

    TxtAnalyser sends data to www.google-analytics.com. A widely used service: 346 other extensions we have analysed send data here.

Updated 30 September 2026aaengkeeajpfabihmmmnkjpogmfkahjo