Badges check a link only after you hover it for a moment, and ask before you open a link rated "Likely dangerous". Turning this on asks for permission to run on all sites; the extension still never reads page content or form data.
Each check sends only the URL to confirmurl.com. See Privacy.