JP-Startpage collects nothing and has no server.

All settings, links and images stay in your browser's local storage. If you turn on profile sync, your settings are stored in the browser's own extension storage and replicated by Firefox Sync to your other machines. Nothing passes through the developer.

Two features contact third parties, both at your choice:

1. Weather. When the weather panel is on, the extension requests a forecast from Open-Meteo (open-meteo.com). In APPROX mode it first asks ipapi.co for an approximate location from your IP address. In PRECISE mode it asks the browser for your location, which prompts you first. In MANUAL mode it sends only the city name you typed.
2. Favicons. Off by default. When on, the extension asks Google for an icon for each link's domain, which discloses those domains to Google.

Gist sync, if you use it, sends your settings to a secret GitHub Gist under your own token. The token is stored only in your browser and is excluded from every export and synced payload.