They normally take a few days to respond to their email afaik, if you've used them some common problems might be:
1. The site autorefresh at the start failed on the depo screen (so you can just refresh it yourself to continue)
2. If you tried funding the deposit address twice but went past step 3 and can't see your private keys/chips chipmixer would be able to help with that providing your session hasn't expired).

These are the most common I see, generally if there's a problem with funds your token or a signed message from the deposit addresses should be sufficient afaik.

Yeah!

Nothing is ever track-free. Even using a system like tails still has tracking potential... And any vulnerabilities Firefox could have that might not have been noticed could be duplicated in the branch split to tor...