foxlink has no server. It sends nothing to its authors and has no analytics.

foxlink talks only to Google, and only after you act:

1. Connect Google opens Google's sign-in. foxlink sends your OAuth client ID, and the client secret if you gave one, to Google's token endpoint to get tokens.
2. When you click Show my next 3 events, Show 5 latest email subjects or Read the latest email, foxlink asks Google's Calendar or Gmail API for that data. It shows the result in the popup and keeps no copy.
3. When you approve an email or an event, foxlink sends that message through the Gmail API or adds that event through the Calendar API.
4. Disconnect asks Google to revoke the token.

The tokens stay in this browser, encrypted by foxvault. Your client ID, client secret and settings stay in the add-on's local storage. Google's privacy policy applies to the data that Google holds.