Third-party analytics services disclosed to the user

GDPR Art. 13(1)(e) requires naming every recipient category of personal data at the time of collection. CCPA §1798.115 gives users the right to know specifically which third parties receive their data. An extension that integrates Google Analytics, Mixpanel, or Segment without disclosing this in its privacy policy is transmitting user data to unnamed third parties — a standalone GDPR violation and a Chrome Web Store policy breach. The ePrivacy Directive Art. 5(3) requires prior consent for non-essential tracking; undisclosed analytics satisfies neither the consent nor the transparency requirement. Users who would object to data sharing with specific analytics providers are denied the ability to make that choice.

Enumerate every analytics SDK in your package.json dependencies and manifest.json, then name each one explicitly in your privacy policy and options page:

<!-- In options.html -->
<p>
  This extension uses <strong>Google Analytics</strong> to understand usage patterns.
  <a href="https://policies.google.com/privacy" target="_blank" rel="noopener">
    Google Privacy Policy
  </a>
</p>

In PRIVACY.md:

## Analytics

We use **Google Analytics** to collect anonymized usage data (page views, feature clicks).
No personally identifiable information is sent. See Google's policy:
https://policies.google.com/privacy

Cross-reference telemetry-opt-out: if the analytics service is optional, users must be able to disable it in extension settings.