I've done a deep dive here into the exfiltration StayFocusd has. It sends all the domains, paths and query parameters off to their API, alongside sending off links from AI chats and having the infra there to remotely change configs to scrape all AI chats.