ContextPop does not collect, store, or transmit any personal data to the developer.

• Selected text. When you trigger the menu and pick an engine, the selected text is inserted into that engine's URL and opened in your browser. It is sent directly to the search engine you chose, not to the developer. The same applies to the Dictionary and Thesaurus actions, which open the lookup in a popup window at the provider you configured.
• Clipboard. Copy actions write the selected text to your system clipboard. This happens entirely on your device; nothing is transmitted.
• Settings and engines. Your engine list and preferences are stored only in your browser via storage.local. They are never uploaded. Engines imported from the browser stay on-device.
• Icons and favicons. To show an engine icon, the extension fetches the favicon from the engine's own site, reading the icon the site declares and preferring a high-resolution one. If you set a custom icon URL for an engine, that is used instead. Fetched icons are cached in storage.local on your device and sent without cookies or a referrer, so they are not tied to the page you are viewing. Icons are optional; engines without one display a letter.

• storage — save your engines and preferences.
• search — read the search engines already installed in your browser and run a search with them (used only when you import or use a browser engine).
• clipboardWrite — copy the selected text to your clipboard when you pick a copy action. The copy stays on your device.
• Host access to all sites — needed to show the menu wherever you select text and to fetch engine icons. Requested at install and revocable per-site in the browser's extension settings.

Open an issue at <https://github.com/dcog989/ContextPop/issues> for any privacy question.