This extension communicates with GitHub to get notifications and mark them as read. Actions like marking notifications as read are only done when initiated by the user. The authentication is done directly between the extension and GitHub, no third party server is involved.

The same applies for non-GitHub and GitHub enterprise accounts, the extension only communicates with the given instance server to receive the username and notifications as well as marking them as read.

Authentication tokens and Oauth details are only stored locally in your browser profile.

There is no tracking or analytics from the extension itself.