The extension starts with zero site access. Adding a site triggers a real browser permission prompt scoped to just that domain — nothing broader. No data is collected, stored remotely, or sent anywhere; your list of protected sites stays in your browser's own sync storage, the same place bookmarks live. Full privacy policy linked below.