We have no idea what data they're actually storing, and everything the extensions does is stated in the description of the extension, I'm not a lawyer but I don't think the Computer Misuse Act is being broken here. We have no idea on the data they store so who knows if GDPR is.

But there's also the fact that they are not a EU or UK company, they are Chinese. Where the laws are far more relaxed about things like this.