Hey, the extension needs to read websites to discover lightning tags, lnurl links, decrypt nostr data etc.
But it is completely client-based, meaning evderything stays on your local machine, including (or: especially) your private keys.
We (nor any website you visit) don't know what you are doing with the extension 🤍