dist/amo-privacy-policy.txt. Plain text, no markdown — AMO's textarea won't render tables, so the table from PRIVACY.md is prose here. It's Firefox-flavoured, not a copy of the Chrome text:

• No offscreen permission listed. The Firefox build strips it — there's no offscreen API and no need for one. Listing a permission the package doesn't request is the kind of small inconsistency a reviewer notices.
• Points at about:addons > OCR It > Permissions for revoking site access, not chrome://extensions.
• Says "local extension storage" rather than chrome.storage.local.
• Includes the "no browsing history is kept" paragraph, which is now true of the code and matches your data_collection_permissions: ["none"].