Thanks for the write-up, your diagnosis was correct, and our apologies both for the breakage and for the delayed reply to your support request (we've answered it by email).

The explanation you asked for: Caramel recently went from supporting a handful of stores to all stores, which requires the "access your data for all websites" permission. Firefox does not enable that permission automatically, and with it off the extension can't reach our coupon service, the "couldn't load coupons" message you saw.

To fix it: Add-ons and themes → Caramel → Permissions → enable "Access your data for all websites."

Nothing new is collected, the permission lets Caramel read the store page you're on to find the coupon box, which is how it has always worked. Mozilla now requires this to be declared explicitly, which is the notice you saw. An update is on the way that detects the missing permission and offers a one-click enable.

Thanks for asking! Nothing new is actually collected, the permissions in this update are identical to the previous version. What changed is that Firefox now requires add-ons to formally declare their data use, so we filled that out for the first time. The two items are what Caramel has always done to work: see which store you're on (to check if we've got codes for it) and read the checkout page (to enter codes and confirm the price actually dropped) and since Caramel's fully open source, you're welcome to check for yourself anytime. Really appreciate you asking!

Thank you so much for the thoughtful feedback Katie, and especially for the kind words on the ethics side.

You are completely right about the sign-in flow. If Google/Apple sign-in is available on the website, it should also be easier to use from the extension popup. The password reset/change flow also needs to be clearer, so we’ll look into improving that as well.

Really appreciate you flagging this. You’re also welcome to join our Discord here so we can keep you updated and help directly: https://discord.com/invite/2vVVrQ5CEB