Is XCancel safe?

Clean risk

XCancel redirects Twitter and X page and frame loads to xcancel.com while preserving the requested path.

When a Twitter or X page or embedded frame loads, XCancel uses blocking web request rules to send the browser to the matching xcancel.com path. The redirected URL includes the original path, so xcancel.com receives the destination path from the Twitter or X request.

1Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 4.1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on twitter.com

    *://*.twitter.com/*

  • Read and change your data on x.com

    *://*.x.com/*

  • Watch every request your browser makes

    webRequest

  • Watch, block and rewrite every request your browser makes

    webRequestBlocking

Where it sends data

Destinations our analysis observed XCancel contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • xcancel.com

    XCancel sends data to xcancel.com. One other extension we have analysed sends data here.

Updated 30 September 2026amo-2634216