Is XPaint image editor and painter safe?

Low risk

XPaint image editor and painter sends non-OffiDocs tab URLs to OffiDocs with a persistent local user ID.

When you switch tabs or a tab finishes loading, the extension checks the page URL. For HTTP(S) pages outside OffiDocs, it sends the full URL encoded as hex along with a locally stored user identifier to an OffiDocs endpoint.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

officeonlinesystemsv2.14.8Chrome Web Store
15Risk
Who publishes it

officeonlinesystems - 26 other listings from the same operator, 18 of them carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
officeonlinesystems
Registered address
Av. Dr. Arce 43, Madrid 28002, Spain

Shared hosts - 1 hostname

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

offidocs.com
Also called by 7 other listings, including Image editor PaintMagick for photos, PhotoStudio, Encrypt any email with CipherMail

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed XPaint image editor and painter contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • www.offidocs.com

    XPaint image editor and painter sends data to www.offidocs.com. 11 other extensions we have analysed send data here.

Updated 30 September 2026lfmobnhbpkejigiaeliemikgciidndak