In short: the extension collects nothing about you and transmits nothing about you. Capturing, assembling and saving happen entirely on your device. The provider has no knowledge of whether or how the extension is used.

Role of the provider under the GDPR:
The provider is not a controller within the meaning of Art. 4(7) GDPR, as no processing takes place on the provider's side.

Processing only on your device:
• Image content of the tab being captured, held in memory only during the capture
• Page title and address, used only for the file name and the citation details in the PDF
• Settings and a file counter via Firefox's storage.local interface (not part of Firefox Sync)

Network requests:
Exactly one request of its own: the time anchor. Before saving, the extension asks the public randomness beacon drand (api.drand.sh, drand.cloudflare.com, api2.drand.sh) for its current value. It proves the capture cannot have been made before that moment. The request contains no address, no page content and no identifier; like any network request it reveals your IP address and the time to the answering service (Cloudflare, EPFL, Protocol Labs). Without a network, the file is saved without the anchor.
Only on your explicit action: the store's review page (when you tap the rating notice) and, if you switch on "Also download the publisher's original file" (default: off), the full-text address that the captured page itself declares.
Citation details are read from the page already open in your browser; no citation service is contacted.

What does not happen:
• No analytics, no telemetry, no crash reports, no advertising
• No accounts, no sign-in, no cookies set by the extension
• No transfer to the provider or to third parties other than the time-anchor request above

Permissions:
• Access to all websites — requested at installation since 2.52.0. Firefox allows capturing a whole page in one pass only with this permission. It is used only when you start a capture, and only for the tab you are on. You can switch it off in the extension's Firefox settings; captures then run section by section.
• activeTab, scripting — run the capture in the current tab
• downloads, downloads.open — save the PDF and open it if you choose
• storage — settings on your device
• menus, notifications — context menu, progress and the "saved" notice
• clipboardWrite — copy the file path to the clipboard, if enabled

No transfer to third countries by the provider. The time-anchor request goes to servers run by drand operators, including Cloudflare; only IP address and time are transmitted, as with any page request.

Your rights:
Rights under Art. 15–22 GDPR cannot be exercised against the provider, as it processes no data. Uninstalling removes all settings; you delete PDFs yourself.

Processing by you: you are responsible for the content you capture. For personal use the household exemption applies (Art. 2(2)(c) GDPR).

Source code (MIT licence) for verification: https://github.com/Bubu89/full-page-pdf-snap
Contact: contact@provinglab.dev