What the extension sends, and when

The privacy policy section 5 is the authoritative description. This is the short version.

In every mode

The extension talks only to api.slopsquash.com. It never reads or sends your browsing history, bookmarks, passwords, form fields, or the contents of pages other than the user-generated content it checks. It never sends full page URLs and never captures screenshots.

Free tier, network detection on (the default)

1. Writing-pattern analysis runs on text entirely inside the browser.
2. Batches of up to 25 text items (up to 8,000 characters each) go to the text endpoint for provenance checks and a verdict-cache lookup. The text is processed in memory to produce a verdict and is not stored; only its hash and the verdict are cached.
3. Batches of up to 12 image URLs go to the image endpoint. Our server fetches each image (up to 8 MB) to read Content Credentials, EXIF and IPTC, and sends the file alone to a provenance verifier. On the free tier the extension itself uploads image bytes only for data: and blob: images, or as a single bounded retry (4 MB cap) when the server reports it could not fetch the URL.
4. Optionally, the hostname of the page (x.com, not the path) for per-site usage statistics.

Signed in, requests carry your extension token so limits apply to your account. Signed out, requests are anonymous and limited by a hashed IP address kept as a daily counter.

Pro

The same, with higher limits, plus a recheck request (text or image URL) when you ask for one. Auto-block, allow-lists and account rules are enforced locally and never sent.

On-device only

Nothing is sent. See On-device only mode.

Stored in the browser

Your token, your settings, and a per-tab memo of recent verdicts in session storage that clears when the browser closes.