Is Web Paint Tool - draw online safe?
Web Paint Tool stores page drawings in each website's localStorage where that site's scripts can read them.
When you draw on a page, Web Paint Tool injects its drawing script into the active tab and saves the canvas as a data URL in that page's localStorage. Those saved annotations stay on the visited site's origin, so scripts from that website can read them; the reviewed code did not show the annotations being sent to a remote server.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 1.0.7. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to. The current listed version is 1.0.9, which we have not unpacked yet.
Read and change your data on every site you visit
<all_urls>
Schedule its own background tasks
alarms
Run its own code inside the pages you visit
scripting
Store data in your browser
storage