> but I can tell you this app does not track sites you browse

Except for this snippet of code in popup.js of course.

var _gaq = _gaq || []; _gaq.push(['_setAccount', 'UA-40692955-5']); _gaq.push(['_trackPageview']);

Edit: I tested this with a console.log, and it output immediately on page load, without clicking anything.