Stillpoint has no account, no server, no analytics and no tracking. Nothing is ever
sent to the developer.

Your settings, photos and cached data stay in your browser's extension storage on this
device. They leave it only if you export them to a file yourself.

A new install makes no network requests. Requests start only when you turn on a
feature that needs one, and each goes straight to the service named below. They are
sent without cookies, and the photo and icon requests also omit the referrer. Stillpoint
fetches nothing before a new tab has painted: widgets show their last saved data first,
then update.

• Weather, finding a place: the place name you type and your browser's language go to Open-Meteo (geocoding-api.open-meteo.com), while you search in the widget's settings.
• Weather, the forecast: the place's coordinates, rounded to about 1 km, and your units go to Open-Meteo (api.open-meteo.com), at most every 30 minutes while a new tab is open.
• Weather, "Use my location": Firefox's own location service, not Stillpoint, once when you click; Firefox asks you first. Stillpoint keeps only the rounded coordinates.
• Background, Lorem Picsum: a request for a page of the photo list, then the photos, from picsum.photos, when the photo is due to change (every tab, hourly or daily).
• Background, Unsplash: your Unsplash access key and search words, plus the "download" notice Unsplash's API terms require, to api.unsplash.com and images.unsplash.com, on the same schedule.
• Links, site icons: a request to each linked site for its own icon, each time the widget shows (cached by the browser); never for local or private-network addresses.
• Stocks: your watchlist's symbols and your Twelve Data API key to api.twelvedata.com, every 15, 30 or 60 minutes (your choice) while a new tab is open.
• Search: your search words go to the engine you picked, only when you press Enter, by navigating there.

Clicking a link (a photographer's credit, a link tile, a search) opens that site like
any other link would. A credit link to Unsplash carries utm_source=stillpoint, which
Unsplash's terms ask for.

The Clock, Date and Quote widgets, themes, and your own photos make no requests. Quotes
are built into the extension.

• Storage (storage), to keep your settings on this device. This is the only
  permission asked for at install, and there are no site permissions: every
  service above lets the extension read its answers without one.
• Firefox's data-collection categories, optional:
• Location (locationInfo): asked for when you set a place for Weather.
• Search terms (searchTerms): asked for when you search for Unsplash
  backgrounds.

Each is asked for from the click that turns the feature on. Without it, that
feature stays off and nothing else changes. You can withdraw either one in
about:addons.

Three features send something but are not declared as data collection, since none
sends your personal data to the developer or to a service of Stillpoint's choosing:

• Search sends your words only by taking you to the engine you picked, exactly as
  typing in the address bar would.
• Link icons are each site's own icon, requested from the site you added.
• Stock symbols are public ticker names, not information about your finances.

An Unsplash access key or a Twelve Data API key is stored with your settings, so it
is included when you export them to a file. Remove it from the file before sharing it.


Any change to what Stillpoint sends will be listed here, and the version history of
this file is public.