Is URL Shortener safe?

Medium risk

URL Shortener sends saved Cutt.ly API tokens and long URLs to app.thebyteseffect.com when shortening links.

When Cutt.ly is selected, URL Shortener reads the saved Cutt.ly API token and the long URL being shortened. It sends both values in a GET request to the publisher's app.thebyteseffect.com proxy instead of sending the request directly to Cutt.ly.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

TonyStark_v13.0.2Firefox Add-ons
40Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 13.0.2. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on tinyurl.com

    https://tinyurl.com/*

  • Add items to the right-click menu

    contextMenus

  • Act on the current tab, but only after you click the extension

    activeTab

  • Store data in your browser

    storage

  • Write to your clipboard

    clipboardWrite

Where it sends data

Destinations our analysis observed url-shortener- contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • app.thebyteseffect.com

    url-shortener- sends data to app.thebyteseffect.com. One other extension we have analysed sends data here.

Updated 30 September 2026amo-950419