[founderling]

A bookmarklet is only invoked when you click it. Not on every fricking website you visit.

And it would just have to be a single line that you can read so you can trust it. Something like:

    javascript:location.href='https://discuss.com/'+location.href

That would redirect you to discuss.com where you can discuss your current url without discuss.com having any access to your data.

To make it more convenient, the bookmarklet could also add the discussion to the current page via an iframe which also has no access to any outside data.

[comntr]

But if you click on it, it will have access to all your data? There is no in between: either no access until you click or full access when you click.

This can be done already:

javascript:location.href='https://comntr.github.io/#'+location.href