Recon Cockpit does not collect, store, or transmit any personal data, browsing history, or usage analytics — to the developer, to any third party, or to any external server. There is no telemetry, no remote logging, and no analytics SDK of any kind.

What the extension does with data, all of which stays on your device:

• Settings (crawl limits, concurrency, scan toggles) are saved locally via the browser.storage.local API and never leave your machine.
• When you click "Start Smart Scan," the extension reads the current page's DOM and makes read-only HTTP requests to that page's own origin only (passive discovery, same-origin crawl, parameter/reflection checks, and checks for common exposed paths). No request is ever sent to any origin other than the site you are actively scanning.
• Scan results (artifacts, parameters, findings) are held in memory for the current tab session and are not persisted, synced, or transmitted anywhere. You may optionally export them as a local JSON/CSV file or copy them to your clipboard — both are actions you trigger manually.
• The extension never activates automatically: it performs no action on install, on browser startup, or on page load. Every scan is started by an explicit click.

Because no personal or usage data is collected or transmitted, this add-on's Firefox manifest declares data_collection_permissions: none.

Contact: https://github.com/dragonked2