Zen AWS SSO Tab Closer does not collect, transmit, retain, sell, or share data. It has no analytics, telemetry, advertising, remote service, or network client.

The extension locally inspects matched page URLs, titles, and visible page text to decide whether the current tab is a completed AWS CLI SSO sign-in tab. When every fail-closed check succeeds, it asks Firefox to close only that sender tab. It does not store callback parameters, authorization values, AWS account data, browser history, or credentials.

Diagnostic output is limited to fixed reason codes in the local browser console. It never includes an observed URL, query, fragment, page text, account identifier, or credential.

The required host access is limited to:

HTTP pages on 127.0.0.1, with runtime acceptance restricted to the exact AWS CLI loopback callback contract; and
matched awsapps.com access-portal pages, with stricter runtime host, path, title, structure, text, visibility, and failure checks.


The manifest declares Firefox's built-in no-data setting: data_collection_permissions.required: ["none"].

This policy applies to extension version 0.4.0.