The source is available on github for you to inspect. I don't collect any information at all, it's all local (but I guess that's what an actual bad actor would say also). The size is just because I haven't really optimised anything (I guess I should at least minify as part of my build process).
It's got an Apache license inherited from the previous extension I forked from, and honestly it's just something I haven't paid attention to. I'm open to making it more permissible.