This add-on collects no user data.

It makes no network requests of any kind — no fetch, no XHR, no analytics, no account, no telemetry. This is declared in the manifest as browser_specific_settings.gecko.data_collection_permissions.required = ["none"], and Firefox shows it to the user at install time.

Card numbers are generated locally with the Web Crypto API (crypto.getRandomValues). They exist only in the popup, in the clipboard when you copy one, and in the page when you fill a form. They are never transmitted, logged or stored on any server.

What is stored, and where:
• Preferences (default card network, quantity, expiry window, theme) — browser.storage.sync, kept locally and synced by Firefox to your own Mozilla account. We never see them.
• Cards currently shown in the popup — browser.storage.session, so they survive the popup closing. Cleared when you close the browser.
• Nothing else. No browsing history, no page contents, no identifiers.

Permissions and privacy:
• The add-on requests no host permissions and registers no always-on content script. It can read a page only when you point it at one — by clicking the toolbar button's "Fill form", choosing a right-click item, or pressing the keyboard shortcut — and only that tab, at that moment.
• clipboardRead is optional and requested at runtime, only when you press "Paste from clipboard" in the Validate tab, and only to read the card number you intend to check. Declining it leaves every other feature working.

The add-on is open source under the MIT licence, so every statement above can be verified against the code: https://github.com/ccgeneratororg/ccgenerator-firefox

Full policy for the project and the website: https://ccgenerator.org/privacy-policy/