diff --git a/extension/PRIVACY.md b/extension/PRIVACY.md
index 30e032e..6b54c42 100644
--- a/extension/PRIVACY.md
+++ b/extension/PRIVACY.md
@@ -1,6 +1,6 @@
 # Thingport Grab privacy policy
 
-_Effective 27 September 2026._
+_Effective 29 September 2026._
 
 Thingport Grab is a browser extension that imports 3D-printing models from MakerWorld, Printables
 and Thingiverse into **your own self-hosted Thingport instance**. It has no servers of its own: the
@@ -62,14 +62,13 @@ model, and the model links listed on collection pages. It doesn't read any other
 
 ## Permissions
 
-| Permission                                       | Why                                                                                                            |
-| ------------------------------------------------ | -------------------------------------------------------------------------------------------------------------- |
-| Storage                                          | Keeps the settings and data listed under "What the extension stores".                                          |
-| Tabs                                             | Opens imported models and the setup form, and moves between model pages during a MakerWorld collection import. |
-| Cookies                                          | Reads MakerWorld's session cookie, only on makerworld.com, for MakerWorld imports.                             |
-| Downloads                                        | Reads the link from the MakerWorld download it starts, then cancels and removes that download.                 |
-| Access to MakerWorld, Printables and Thingiverse | Shows the import button on their pages.                                                                        |
-| Access to your Thingport instance                | Requested for that one address when you set the extension up, so it can talk to your instance.                 |
+| Permission                                       | Why                                                                                            |
+| ------------------------------------------------ | ---------------------------------------------------------------------------------------------- |
+| Storage                                          | Keeps the settings and data listed under "What the extension stores".                          |
+| Cookies                                          | Reads MakerWorld's session cookie, only on makerworld.com, for MakerWorld imports.             |
+| Downloads                                        | Reads the link from the MakerWorld download it starts, then cancels and removes that download. |
+| Access to MakerWorld, Printables and Thingiverse | Shows the import button on their pages.                                                        |
+| Access to your Thingport instance                | Requested for that one address when you set the extension up, so it can talk to your instance. |
 
 ## Your control over your data
 
diff --git a/extension/scripts/manifest.ts b/extension/scripts/manifest.ts
index 6cb7f4c..3da34da 100644
--- a/extension/scripts/manifest.ts
+++ b/extension/scripts/manifest.ts
@@ -28,7 +28,7 @@ export function buildManifest(target: Target, pkg: { version: string; descriptio
       default_icon: iconSet("dark"),
     },
     background: target === "firefox" ? { scripts: ["background.js"] } : { service_worker: "background.js" },
-    permissions: ["storage", "tabs", "cookies", "downloads"],
+    permissions: ["storage", "cookies", "downloads"],
     // The user's instance origin, requested at setup.
     optional_host_permissions: ["*://*/*"],
     content_scripts: [{ matches: PROVIDER_MATCHES, js: ["content.js"], run_at: "document_idle" }],