I know, it's inconvenient and demands a lot of trust. This add-on only reads data when you call it up, and it does not read data in pages other than the image it's operating on. Either way, it doesn't send info to me -- I have no interest what is happening in anyone else's browser.

For what it's worth, I did *try* to write this extension *without* that permission. If the image is hosted on the same server as the page (both the same server as listed in the address bar), then the fact that you right-clicked the image could grant one-time permission automatically (so called activeTab permission).

But a large proportion of images are hosted on a different server, so that method failed frequently in real world testing. Maybe there is a new solution to this four years down the road? I'll update this reply if I find one and rewrite the add-on.