The chain: Firefox 140 made data disclosure mandatory. Our previous version declared "none", which was not accurate under the new definitions, so Mozilla disabled it. We resubmitted using the three categories named in Mozilla's enforcement notice. We then found two of those labels were wrong and removed them, which triggered a second prompt, since Firefox re-prompts on any addition even when the list gets shorter.

You're right that nothing really changed. The add-on behaves exactly as before (with bug fixes) and still runs only on Amazon product pages and keepa.com. The full explanation is now in the add-on description.

"Authentication information" here means one thing: a token the add-on generates on your own device for your Keepa account, so the chart loads your settings and tracked products. It is not your Amazon login, not your Firefox account, and not a password. The add-on never sees any of those.

It replaced the previous label, "personally identifying information" - the list got shorter, not longer. No permissions were added. Access is unchanged: keepa.com and Amazon product pages only.

Firefox 140 introduced these labels; the code behind them is the same as it was. Full source goes to Mozilla every release and their reviewers rebuild it to verify.

The "authentication information" is your Keepa account login authentication to store your settings and enable price tracking. Nothing else.

Keepa does not track your browsing history or collect personal data. The extension only runs on Amazon product pages to load price charts, and nothing is logged or stored unless you choose to track an item.

Nothing about how Keepa handles data changed in this update.

Mozilla now requires every add-on to declare data categories from a fixed list, and Firefox displays them on update.

What Keepa does: on an Amazon product page it sends that product's ASIN to keepa.com to draw the price chart. It is not logged and not retained. Nothing is stored unless you choose to track a product. The "personally identifying information" line refers to your Keepa session token - a login credential for your own account, not your name or email. We think that's the wrong label and have asked Mozilla to change it to "authentication information".

The extension runs only on Amazon product pages.

Nothing about how Keepa handles data changed in this update.

Mozilla now requires every add-on to declare data categories from a fixed list, and Firefox displays them on update.

What Keepa does: on an Amazon product page it sends that product's ASIN to keepa.com to draw the price chart. It is not logged and not retained. Nothing is stored unless you choose to track a product. The "personally identifying information" line refers to your Keepa session token - a login credential for your own account, not your name or email. We think that's the wrong label and have asked Mozilla to change it to "authentication information".

The extension runs only on Amazon product pages.

Nothing about how Keepa handles data changed in this update.

Mozilla now requires every add-on to declare data categories from a fixed list, and Firefox displays them on update.

What Keepa does: on an Amazon product page it sends that product's ASIN to keepa.com to draw the price chart. It is not logged and not retained. Nothing is stored unless you choose to track a product. The "personally identifying information" line refers to your Keepa session token - a login credential for your own account, not your name or email. We think that's the wrong label and have asked Mozilla to change it to "authentication information".

The extension runs only on Amazon product pages.

Nothing about how Keepa handles data changed in this update.

Mozilla now requires every add-on to declare data categories from a fixed list, and Firefox displays them on update.

What Keepa does: on an Amazon product page it sends that product's ASIN to keepa.com to draw the price chart. It is not logged and not retained. Nothing is stored unless you choose to track a product. The "personally identifying information" line refers to your Keepa session token - a login credential for your own account, not your name or email. We think that's the wrong label and have asked Mozilla to change it to "authentication information".

The extension runs only on Amazon product pages.