It does work fine for me.
"Smooth Gestures" inject inline <script> tag in the content, thus it needs javascript permissions for the site which you are visiting.
Be aware that HTTPSB shows that Smooth Gesture does the following:
Startup:
For every page, *only* if "Submit Usage" is "on":
There is a "userId" parameter in the above request though, despite SG stating "anonymous gesture usage report".
I thought I would mention since if you are using HTTPSB, likelihood is that you are concerned with privacy etc.