Firefox
- The documents do not say whether your data trains AI.
- The documents do not say whether your data is used for ads.
- Data is shared only with the providers who run the service.
- The policy describes staff access for safety and legal checks.
Mozilla collects account, device, and usage data; sync is encrypted, but you them and is capped at $500.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Account info, email, device details, usage logs, and city-level location from your IP.
Read the exact line
Privacy policy
“Mozilla also collects certain data, like technical and settings data, to provide the core functionality of Mozilla accounts and its connected services”
Training
They use it to run the account, fix bugs, improve features, secure it, and send marketing.
Read the exact line
Privacy policy
“We also need to process data to keep Mozilla accounts operational, improve features and performance, and identify, troubleshoot and diagnose issues.”
Sharing
Service providers, Mozilla companies, and governments if they get a valid legal request.
Read the exact line
Privacy policy
“To perform the purposes listed above, we work with partners, service providers, suppliers and contractors.”
Kept
Accounts last while active; unused ones may go after two years; tech data up to 25 months.
Read the exact line
Privacy policy
“In general, your account data is retained for as long as your account is active.”
Controls
You can change account settings and ask for a copy or deletion through their request portal.
Read the exact line
Privacy policy
“You can update your Mozilla account settings at any time.”
Fine print
Firefox is as-is, you Mozilla, is $500, and continued use can mean you accept new terms.
Read the exact line
Terms of service
“Any for Mozilla under this agreement is limited to $500.”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Update Mozilla account data settings
Mozilla account settings (policy: you can update data collection settings at any time)
Request a copy or deletion of your data
Mozilla Access Request Portal; questions to compliance@mozilla.com or dpo@mozilla.com
Turn on sync only if you want encrypted copies across devices
Mozilla account / Firefox sync settings
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
If someone sues Mozilla because of how you used Firefox, you may have to pay Mozilla’s legal costs.
Read the exact line
Terms of service
“You agree to and hold Mozilla and its affiliates harmless for any or claim from your use of Firefox, to the extent permitted by applicable law.”
For example, if a site claims your browsing with Firefox harmed them and they sue Mozilla, you might have to cover Mozilla.
If Mozilla causes you harm, they say they will not pay more than $500, unless your local law says otherwise.
Read the exact line
Terms of service
“Any for Mozilla under this agreement is limited to $500.”
For example, if a Firefox bug wipes important files, they cap what they might owe at $500.
They can cut off your use of Firefox whenever they want, for any reason.
Read the exact line
Terms of service
“Mozilla can suspend or end anyone’s access to Firefox at any time for any reason, including if Mozilla decides not to offer Firefox anymore.”
For example, they could stop offering Firefox and try to email you, but they do not have to wait for you to export data first.
If they change the rules and you keep using Firefox, they treat that as you agreeing.
Read the exact line
Terms of service
“We will take your continued use of Firefox as acceptance of such changes.”
For example, they could post new terms online and you would be bound just by opening Firefox later.
If they think a saved link broke the rules, they can keep that data forever.
Read the exact line
Privacy policy
“Content that is found to violate our Terms of Service may be retained indefinitely, to allow us to prevent and assess future abuse.”
For example, a link collection they flag as abusive might stay on their systems even after you delete it.
They guess where you are down to city or region from your IP, not just country.
Read the exact line
Privacy policy
“We infer your location from your IP address at the level of your country, city, or region.”
For example, logging into your Mozilla account could record that you are in Austin, not only the United States.
Synced tabs, passwords, and history are locked so Mozilla says it cannot read them.
Read the exact line
Privacy policy
“This encryption is end-to-end: your synced data is encrypted before it ever leaves your browser and can only be decrypted by another sync client with the encryption keys; Mozilla cannot decrypt this information.”
For example, your saved passwords sync across phones without Mozilla being able to open them.
They say they will not hand over specific user data to the government without a valid legal demand.
Read the exact line
Privacy policy
“Mozilla requires a valid Legal Process to compel the disclosure of Specific User data to a government.”
For example, they would expect a subpoena before giving police your account email.
They say information sitting on their servers is encrypted.
Read the exact line
Privacy policy
“All data stored on Mozilla servers is encrypted.”
For example, your account email on their servers is stored in encrypted form.
If you do not sign in for over two years, they may delete the account after trying to warn you.
Read the exact line
Privacy policy
“Mozilla periodically deletes accounts that have not been signed in for more than two years (we’ll use reasonable efforts to send you a reminder prior to taking this action).”
For example, an old Mozilla account you forgot could be wiped after two years of no login.
Words to know
Legal words from the lines above, in plain English.
- service providers
- Outside companies that handle your data on the app's instructions, such as a cloud host or an email sender. For example, the company that stores the app's files in the cloud sees your data but only does what the app tells it.
- retention
- How long a company keeps your data before deleting it. For example, a policy might keep your messages for 30 days after you delete them, or for as long as it likes.
- limitation of liability
- A cap on what the company will ever pay you if something goes wrong, often only what you paid in the last year. For example, if a leak of your data costs you thousands, the most you may get back is a month's subscription fee.
- indemnify
- You promise to pay the company's legal costs and losses if your use of the service gets it sued. For example, if you post a song you do not own and the label sues the app, you owe the app's lawyer bills.
- affiliates
- Other companies owned by or connected to the same parent company. For example, if you use one app, its sister apps under the same owner may also get your data.
How we got here · grade C · score 44/100 · 15 of 15 policy answers backed by a verified quote · 6 not stated
What does the app collect beyond what it needs to work?
They collect account and contact data plus technical, settings, interaction, unique IDs, and city-level location from IP.
Does it record your voice, face or body, and what happens to that?
Not stated in the documents.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
They mention content moderation, fraud, and legal requests, not routine sampling of private chats.
Are you profiled or tracked for advertising?
Not stated in the documents.
Do they sell or share your data, and can you opt out?
They share with partners, contractors, and Mozilla affiliates under contracts, and with governments only with valid legal process.
What rights do they take over what you type and what the AI makes?
You give Mozilla the rights needed to run Firefox and free use of any feedback you send.
How long do they keep your data after you delete it, and can you delete it in the app?
Accounts last while active; unused accounts may be deleted after two years; technical data can be kept up to 25 months; some abuse content indefinitely. Deletion is by request portal.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Not stated in the documents.
Do they commit to basic security, and have they leaked data?
They say server data is encrypted, sync is end-to-end encrypted, and they use a third-party web application firewall.
Is there a real age gate, and are teens protected?
Not stated in the documents.
Will they tell you when the rules change, and is the policy specific?
Policies show dates and are posted online; Firefox terms treat continued use as acceptance of changes.
Can they close your account without warning, and can you get your data out first?
Mozilla can suspend or end access at any time for any reason; they only say they will try to notify you.
If something goes wrong, who pays?
Firefox is as-is, liability is capped at $500, and you must indemnify Mozilla for claims from your use.
Do subscriptions renew on their own, and can you get a refund?
Not stated in the documents.
The privacy policy is 2,521 words at a college level (Flesch reading ease 40.6); the terms are 861 words at a college level.
