Banger!@

New permissions verbatim: "The developer says this extension collects: personally identifying information, financial and payment information." Wtf. I don't care if that's different wording of existing permissions, I don't want you to have those permissions, NordVPN.

If you look at the Proton VPN extension it only requires permissions for Access your data for account.proton.me and account.protonvpn.com. Whereas for Nord it's required to access all website data, not optional. If Nord needs to access data for account information, they should restrict it to Nord domain(s), rather than leaving it open for this extension to be able to read all website data. That seems like an implementation improvement they can make, rather than excuses.

NordVPN is pushing an update to force data harvesting including privacy data and payment information. Even from paying users like me!

Don't panic, this is a Firefox policy change, not a NordVPN data grab.

NordVPN hasn't introduced any new telemetry, tracking, or background data harvesting. They simply pushed an update to comply with Firefox's new rules. Because this is a premium, account-based service, it naturally handles:

Authentication: Your Nord Account login/email.

Financial Info: Checking your active subscription status so the extension actually works.

Location: Finding the closest, fastest VPN servers to route your traffic.

Chill. It's exactly the same Nord VPN service we've been getting all along.

Wtf is the new permission for ? Please provide a changelog or revert the changes now !

What the heck is that 🤨 ? Private data harvesting... for a privacy related product.

One could start think about if our data is actually private when using Nord products.

If this won't be reverted no way I'm gonna prolong subscription.
---

Edit: (forbidden URLs: look for ["Announcing data collection consent changes for new Firefox extensions" site:blog.mozilla.org] in search engine)- is what I assume is L.L. referring to.

I'd like to see explanation then why it was collected up until now, just simply policy was not requiring to explicitly be stated up until now.
Can this really, really cannot be avoided?

As other commenters mentioned, its started to force privacy data harvesting, including financial information, forms, and payment data.

While a VPN advertises that you won’t be tracked online, now the VPN itself tracks your financial, payment, and personally identifying info. Brilliant scheme.

Latest update asked permissions to gather personal data and payment information, which is unacceptable for a VPN organization.

The latest update sneakily forces privacy data harvesting, including financial information, forms, and payment data. This is ridiculous and should be banned.

RE: Stop making this sound harmless. Firefox is clearly asking me to approve new required data collection before the extension can update. I cannot reject these permissions separately, so in practice I either accept the added privacy risk or I cannot install the update.

The warning explicitly mentions personally identifying information, financial and payment information, authentication information, and location. That is not just normal technical wording. If no new data collection was introduced, then explain exactly why Firefox now requires this new consent and why users are being forced to approve it. At the moment it looks like a serious privacy downgrade, and I am not comfortable accepting it.

Permissions and data
Required permissions:

Download files and read and modify the browser’s download history
Display notifications to you
Read and modify privacy settings
Control browser proxy settings
Access browser tabs
Access browser activity during navigation
Access your data for all web sites

Optional permissions:

Access your data for all web sites

Required data collection, according to the developer:

Authentication information
Financial and payment information
Location
Personally identifying information

Optional data collection, according to the developer:

Technical and interaction data

the best