<all_urls> (host permission)

The extension translates the page the user is reading, so it must be able to
read text from and write text to whatever site that is. Restricting it to a
list of hosts would mean it worked on some pages and silently not on others,
which for a translator is indistinguishable from being broken. Nothing is
read until the user asks for a translation — by selecting text or pressing
the translate entry — except that the content script
listens for selections in order to offer the button.

contextMenus — the right-click entries: translate this text, translate
this page, open the panel, settings.

storage — settings and API keys, in storage.local. Nothing is synced.

clipboardWrite — the copy button on a translation result.

data_collection_permissions: ["websiteContent"] — the text being
translated leaves the browser for the translation service the user selected.
That is the whole function of the extension, so it is declared as required
rather than optional. Nothing else is transmitted: no analytics, no telemetry,
no identifiers. There is no server belonging to this extension.