diff --git a/DuckDuckGo/Browser Tab/Model/Tab.swift b/DuckDuckGo/Browser Tab/Model/Tab.swift
index 1a28658f19..3fe465c1ec 100644
--- a/DuckDuckGo/Browser Tab/Model/Tab.swift	
+++ b/DuckDuckGo/Browser Tab/Model/Tab.swift	
@@ -916,15 +916,17 @@ extension Tab: WKNavigationDelegate {
             return .download(navigationAction, using: webView)
 
         } else if url.isExternalSchemeLink {
-            // ignore <iframe src="custom://url"> but allow via address bar
-            guard navigationAction.sourceFrame.isMainFrame,
-                  // ignore 2nd+ external scheme navigation not initiated by user
-                  !self.externalSchemeOpenedPerPageLoad || navigationAction.isUserInitiated
-            else { return .cancel }
-
-            self.externalSchemeOpenedPerPageLoad = true
+            // always allow user entered URLs
+            if !userEnteredUrl {
+                // ignore <iframe src="custom://url">
+                // ignore 2nd+ external scheme navigation not initiated by user
+                guard navigationAction.sourceFrame.isMainFrame,
+                      !self.externalSchemeOpenedPerPageLoad || navigationAction.isUserInitiated
+                else { return .cancel }
+
+                self.externalSchemeOpenedPerPageLoad = true
+            }
             self.delegate?.tab(self, requestedOpenExternalURL: url, forUserEnteredURL: userEnteredUrl)
-
             return .cancel
         }
 
diff --git a/DuckDuckGo/Permissions/Model/PermissionModel.swift b/DuckDuckGo/Permissions/Model/PermissionModel.swift
index 352eb6cfdb..b5bc9b1b67 100644
--- a/DuckDuckGo/Permissions/Model/PermissionModel.swift
+++ b/DuckDuckGo/Permissions/Model/PermissionModel.swift
@@ -126,32 +126,15 @@ final class PermissionModel {
                                                  url: url,
                                                  permissions: permissions) { [weak self] decision, remember in
 
-            let query: PermissionAuthorizationQuery?
-            let granted: Bool
-            switch decision {
-            case .deinitialized:
-                query = nil
-                granted = false
-
-            case .denied(let completedQuery):
-                query = completedQuery
-                granted = false
-
-                for permission in permissions {
-                    self?.permissions[permission].denied()
-                }
-
-            case .granted(let completedQuery):
-                query = completedQuery
-                granted = true
-
-                for permission in permissions {
-                    self?.permissions[permission].granted()
-                }
-            }
+            let (query, isGranted) = self?.handleQueryDecision(decision, requestedPermissions: permissions) ?? (nil, false)
 
             defer {
-                decisionHandler(granted)
+                switch (permissions.first, decision) {
+                case (.externalScheme, .deinitialized):
+                    break
+                default:
+                    decisionHandler(isGranted)
+                }
             }
             guard let self = self,
                   let query = query, // otherwise handling decision on Query deallocation
@@ -163,7 +146,7 @@ final class PermissionModel {
 
             if remember == true {
                 for permission in permissions {
-                    self.permissionManager.setPermission(granted ? .allow : .deny, forDomain: domain, permissionType: permission)
+                    self.permissionManager.setPermission(isGranted ? .allow : .deny, forDomain: domain, permissionType: permission)
                 }
             }
         }
@@ -180,6 +163,36 @@ final class PermissionModel {
         authorizationQueries.append(query)
     }
 
+    private func handleQueryDecision(_ decision: PermissionAuthorizationQuery.Decision, requestedPermissions: [PermissionType])
+    -> (completedQuery: PermissionAuthorizationQuery?, isGranted: Bool) {
+
+        let query: PermissionAuthorizationQuery?
+        let isGranted: Bool
+        switch decision {
+        case .deinitialized:
+            query = nil
+            isGranted = false
+
+        case .denied(let completedQuery):
+            query = completedQuery
+            isGranted = false
+
+            for permission in requestedPermissions {
+                permissions[permission].denied()
+            }
+
+        case .granted(let completedQuery):
+            query = completedQuery
+            isGranted = true
+
+            for permission in requestedPermissions {
+                permissions[permission].granted()
+            }
+        }
+
+        return (query, isGranted)
+    }
+
     private func permissionManager(_: PermissionManagerProtocol,
                                    didChangePermanentDecisionFor permissionType: PermissionType,
                                    forDomain domain: String,
diff --git a/DuckDuckGo/Tab Bar/View/TabBarViewController.swift b/DuckDuckGo/Tab Bar/View/TabBarViewController.swift
index a2c23dd207..8f5d6b52fe 100644
--- a/DuckDuckGo/Tab Bar/View/TabBarViewController.swift	
+++ b/DuckDuckGo/Tab Bar/View/TabBarViewController.swift	
@@ -549,6 +549,14 @@ extension TabBarViewController: NSCollectionViewDataSource {
         }
         return view
     }
+    
+    func collectionView(
+        _ collectionView: NSCollectionView,
+        didEndDisplaying item: NSCollectionViewItem,
+        forRepresentedObjectAt indexPath: IndexPath) {
+
+            (item as? TabBarViewItem)?.clear()
+    }
 }
 
 extension TabBarViewController: NSCollectionViewDelegate {
diff --git a/DuckDuckGo/Tab Bar/View/TabBarViewItem.swift b/DuckDuckGo/Tab Bar/View/TabBarViewItem.swift
index 43ef42c9c3..d8d446a0eb 100644
--- a/DuckDuckGo/Tab Bar/View/TabBarViewItem.swift	
+++ b/DuckDuckGo/Tab Bar/View/TabBarViewItem.swift	
@@ -220,6 +220,7 @@ final class TabBarViewItem: NSCollectionViewItem {
 
     func clear() {
         clearSubscriptions()
+        usedPermissions = Permissions()
         faviconImageView.image = nil
         titleTextField.stringValue = ""
     }
@@ -241,9 +242,7 @@ final class TabBarViewItem: NSCollectionViewItem {
     }
 
     private func clearSubscriptions() {
-        cancellables.forEach { (cancellable) in
-            cancellable.cancel()
-        }
+        cancellables.removeAll()
     }
 
     private func updateSubviews() {
diff --git a/Unit Tests/Permissions/PermissionModelTests.swift b/Unit Tests/Permissions/PermissionModelTests.swift
index 5fb246467f..2ed2cf221b 100644
--- a/Unit Tests/Permissions/PermissionModelTests.swift	
+++ b/Unit Tests/Permissions/PermissionModelTests.swift	
@@ -301,6 +301,25 @@ final class PermissionModelTests: XCTestCase {
         XCTAssertEqual(model.permissions, [:])
     }
 
+    func testWhenExternalSchemePermissionQueryIsResetThenItDoesNotTriggerDecisionHandler() {
+        let c = model.$authorizationQuery.sink {
+            if $0 != nil {
+                self.model!.tabDidStartNavigation()
+            }
+        }
+
+        let e = expectation(description: "Permission granted")
+        e.isInverted = true
+        model.permissions([.externalScheme(scheme: "mailto")], requestedForDomain: "test@example.com") { _ in
+            e.fulfill()
+        }
+
+        withExtendedLifetime(c) {
+            waitForExpectations(timeout: 0.1)
+        }
+        XCTAssertEqual(model.permissions, [:])
+    }
+
     func testWhenAllowPermissionIsPersistedThenPermissionQueryIsGranted() {
         let e = expectation(description: "Permission granted")
         self.webView.urlValue = URL.duckDuckGo