Last updated: August 6, 2026

Login Session Manager ("the extension," "we," "our") is a Firefox browser extension that saves per-domain login sessions (cookies) so you stay signed in to websites after Firefox or your computer restarts. This policy explains what data the extension handles, where it's stored, and what it never does.


The extension does not collect, transmit, or share any data with us or any third party. Everything the extension stores lives entirely on your own device, inside Firefox's local extension storage. We have no servers, no analytics, and no way to see your data.


To do its job, the extension reads and writes the following, all locally:

• Cookies for the sites you choose to save a session for. This is limited to cookie data (name, value, domain, path, and related flags) — not the content of the pages themselves.
• The web pages you're on, only to detect when you've submitted a login form (by checking for a password field on the page and watching for form submissions). This detection happens locally in your browser and is not recorded or sent anywhere.
• Browser tab and navigation information, used only to know which site a login happened on and to trigger auto-restore when you navigate to a site with a saved session.

All saved sessions, labels, settings, and the optional password lock are stored using Firefox's storage.local API, which keeps data:

• On your device only
• Inside your Firefox profile
• Not synced to any Mozilla or third-party account
• Not cleared by "Clear Recent History" or similar browser cache/cookie clearing (only removed if you delete an entry, wipe the extension's data, or uninstall the extension)

No data is sent over the network. The extension makes no network requests to any external server.

• It does not collect or store your usernames or passwords. It only stores session cookies.
• It does not transmit any data to us, to the website you're logged into, or to any third party.
• It does not use analytics, tracking, or telemetry.
• It does not sell, rent, or share your data, because it never leaves your device.
• It does not require an account, sign-in, or internet connection to function.

You may optionally set a password to lock the extension's popup. This password is never stored in plain text: it's run through PBKDF2-SHA256 (150,000 iterations) and only the resulting hash and a random salt are saved locally. This password protects the popup screen only — it does not encrypt the underlying saved session data at rest. Anyone with direct access to your Firefox profile's storage files could still read that data, so treat the password as a screen lock, not full encryption.


The extension lets you export your saved sessions to a JSON file for backup, and import them back in later or on another device. This file is created and saved locally by your browser (via Firefox's downloads feature) and is never uploaded anywhere by the extension. Your saved password hash is intentionally excluded from exports. You are responsible for storing and sharing any exported backup file securely, since it contains your saved session cookies.


| Permission | Why it's needed |
|---|---|
| Access to all sites (<all_urls>) | To read and restore cookies, and detect logins, on whichever site you choose to save — this isn't limited to a fixed list because you can save a session on any site |
| Cookies | To capture and restore session cookies for saved sites |
| Storage | To save your sessions, labels, and settings locally |
| Tabs | To identify which tab/site a login or restore action applies to |
| Web navigation | To trigger auto-restore when you navigate to a site with a saved session |
| Downloads | To let you save an export/backup file to disk |
| Alarms, notifications | Used for internal scheduling and optional user-facing status messages |

None of these permissions are used to collect or transmit data off your device.


The extension is not directed at children and does not knowingly collect data from anyone, since it doesn't collect data from any user at all.


If this extension's data practices ever change, this policy will be updated accordingly, and the "Last updated" date above will reflect that. Since the extension currently transmits no data anywhere, any future change to that would be reflected here first.


If you have questions about this privacy policy or the extension's data practices, contact: [your contact email here]