Duck Alias Relay does not collect telemetry, use analytics, or operate its own server.

The extension stores the forwarding email, Personal Duck Address, and optional Alias Library
entries locally in the Thunderbird profile.

For Private Address generation, the user manually provides a DuckDuckGo token. In standard mode,
the token is stored locally. If the user enables Secure Vault, the token is encrypted with a user-
defined master password; the master password is never stored, and the decrypted token exists only
for the current Thunderbird session.

When the user explicitly generates a Private Address, the extension sends an HTTPS request to
https://quack.duckduckgo.com/api/email/addresses with the token in the Authorization header. No
request is made when using a Personal Address or a saved alias.

The extension does not send email automatically, read received messages, access contacts,
synchronize data, or share data with any server operated by this project.