Clickable Links does not collect, store or share any personal data, and has
no analytics or telemetry.

Your mail.
To make links clickable, the add-on reads the text of the
message you are viewing, on your computer. Nothing from your mail (no URLs,
domains, senders or contents) is ever sent anywhere, stored, or logged.

Settings.
Your settings (which display types are processed, the sender
allowlist, whether the phishing list is on) are stored locally in
Thunderbird and are not synchronised.

*Optional list of known phishing domains.
This option is off by default.
Only when you switch it on, and after you grant Thunderbird's permission
request, the add-on downloads the public list of active phishing domains
from
`https://raw.githubusercontent.com/Phishing-Database/Phishing.Database/master/phishing-domains-ACTIVE.txt`:
right away, and again when the stored list is more than 6 hours old. This is
an ordinary download without cookies. Like any download, it lets the server
(GitHub) see your IP address, the time of the request and Thunderbird's user
agent; the add-on sends nothing else. The list is stored locally and links
are checked against it on your computer. Switching the option off stops the
downloads, deletes the stored list and removes the permission.

The add-on makes no other network connections.