Host permissions (:///*) are required solely to read URLs for active searches and inject the toolbar. All settings and queries are saved locally or via encrypted browser sync. There are no trackers, analytics, or telemetry.