Every network call in the extension posts movie identifiers (Netflix IDs, Disney+ IDs, or cinema page URLs) to `[domain withheld] — the publisher's own first-party API (publisher website: [domain withheld]). No user PII, browsing history, cookies, or page content is transmitted. The `storage` permission is used solely to cache movie rating responses locally via `chrome.storage.local` for performance (see ` `, ` `). ML signal inflation is fully explained by legitimate code: 117 `js_appendchild` hits come from ` ` which programmatically builds rating overlay widgets for 8 separate sites; 5 hits are the three rating API calls; `js_innerhtml` hits are the rating label HTML strings set on the extension's own injected DOM nodes, not on page content.