We changed the required permissions. The previous version asked for access to every website you visit, which sounds scary even though the script just sat there waiting for you to click Save. Now the script only loads into a tab when you actually click Save on it. Nothing else.

For you, that means the install dialog says "on the active tab when you click the extension" instead of the old "read and change all your data on websites you visit". Same features, less alarming.

Under the hood: dropped the always-on content script, added the scripting permission, and the background now injects the extractor on demand. Also fixed the Readability serializer so it does not depend on quirks in linkedom on the server side.

Full permission list, for reference:

• identity for signing in
• storage so you stay signed in
• contextMenus for the right-click "Save selection" entry
• notifications for the confirmation toast after a right-click save
• activeTab and scripting so the extractor can run on the page you save
• One host permission, https://lesefluss.app/*, for the API

Nothing else gets read, sent, or stored.