Firefox now makes every add-on declare data categories from a fixed list, and it shows them on update.

All Keepa does is send the ASIN of the Amazon product you’re viewing to keepa.com to draw the price chart. Strictly speaking, that ASIN counts as browsing activity, because it shows which product page you’re on. That’s why the category is there. It isn’t logged or kept, and nothing is stored unless you track a product.

You’re right about the wording: Mozilla sets the categories and the text, and we can’t change them. The only data Keepa declares is the ASIN of the Amazon product you’re viewing, which it sends to keepa.com to draw the price chart. Strictly speaking, that ASIN counts as browsing activity, because it shows which product page you’re on. That’s why the category is there. It isn’t logged or kept, and nothing is stored unless you track a product.

amazon.pl isn’t supported right now. Keepa works on Amazon’s US, UK, German, French, Italian, Spanish, Dutch, Canadian, Mexican, Brazilian, Japanese, Indian and Australian sites.

Keepa never asks for your Amazon, Firefox or other passwords. That label was about your keepa.com login, which the extension passes back to keepa.com so you stay signed in to your Keepa account inside the price chart. It never goes anywhere else. Firefox’s wording made it sound like much more, so we’ve removed that category. The current version declares only browsing activity: the ASIN of the Amazon product you’re viewing, used to draw the chart.

Sorry the chart didn’t match what you saw. The usual reasons are that the chart shows separate lines for Amazon’s own price and for other sellers’ new and used offers, that coupon, Prime-exclusive or Subscribe & Save prices aren’t part of the regular price, and that a lowest price can be on a different variation (size or colour) of the product. If you send the product link to support, we’ll look at that exact history and tell you what happened.

Thank you for actually reading the code - that's more scrutiny than most of this thread, and your read is accurate.

On the cookie listener: cookies.onChanged is scoped to an add-on's host permissions, so it only receives changes for keepa.com and the Amazon domains - not the whole browser. The first two lines of the listener discard anything that isn't keepa.com/extension. It exists because the chart is embedded from keepa.com, and Total Cookie Protection stops that frame from reading its own cookies, so the add-on mirrors them across.

On understating: fair, and we've changed it since. Two of the three labels were wrong - "website content" (we transmit none) and "personally identifying information", which was only ever the Keepa account token and is now "authentication information". The listing now spells out what each remaining category covers. If a specific line still reads as understated, tell us and we'll fix the wording.

On the rating: we understand the logic. The cost is that the star is what the ranking and most visitors register, while "no new harmful code has been added" is the part they don't read. We'd rather that sentence were the findable one.

"Authentication information" here means one thing: a token the add-on generates on your own device for your Keepa account, so the chart loads your settings and tracked products. It is not your Amazon login, not your Firefox account, and not a password. The add-on never sees any of those.

It replaced the previous label, "personally identifying information" - the list got shorter, not longer. No permissions were added. Access is unchanged: keepa.com and Amazon product pages only.

Firefox 140 introduced these labels; the code behind them is the same as it was. Full source goes to Mozilla every release and their reviewers rebuild it to verify.

The chain: Firefox 140 made data disclosure mandatory. Our previous version declared "none", which was not accurate under the new definitions, so Mozilla disabled it. We resubmitted using the three categories named in Mozilla's enforcement notice. We then found two of those labels were wrong and removed them, which triggered a second prompt, since Firefox re-prompts on any addition even when the list gets shorter.

You're right that nothing really changed. The add-on behaves exactly as before (with bug fixes) and still runs only on Amazon product pages and keepa.com. The full explanation is now in the add-on description.

"Authentication information" here means one thing: a token the add-on generates on your own device for your Keepa account, so the chart loads your settings and tracked products. It is not your Amazon login, not your Firefox account, and not a password. The add-on never sees any of those.

It replaced the previous label, "personally identifying information" - the list got shorter, not longer. No permissions were added. Access is unchanged: keepa.com and Amazon product pages only.

Firefox 140 introduced these labels; the code behind them is the same as it was. Full source goes to Mozilla every release and their reviewers rebuild it to verify.