Alas toucan is a security nightmare (or was it when I tried it last year) - it was sending all the URLs I was visiting to the server - even local host stuff I was running on my machine. I checked that by using a local proxy and looking at all requests made to the toucan servers.

While I love the idea, I don’t trust the company with my complete surfing history. What they should have done is to have me opt into each website that I want to use toucan on and do not do anything if I visit others.