Plugin found to collect browser sessions

[aading]

During our security review, it was found to collect browser session data which potentially can lead to security risks, do you have a page or section talk about the data you collect and what permission do you need for this plugin?

[Mottie]

Our privacy-policy

[tophf]

Stylus has never "collected" anything, so I suspect a mistake in your methodology. Please elaborate.

It's hard to argue in face of broad and vague accusations... The closest thing I can think of is the local style cache that stores the last 1000 visited URLs for faster startup of the extension's background script, but it's not used anywhere else and will never be used anywhere else, because our extension exists exactly because we rejected a data collection company that took over the original Stylish extension. I already thought of either removing the cache altogether by rewriting the way the main styles are stored or by using a hash instead of the URL.