Mozilla introduces TOS to Firefox: Difference between revisions

}}</ref> One notable concern is the possibility that license to user input could be used to train artificial intelligence tools. This became a concern since Mozilla has recently been working on AI tools.<ref name="orbit" />

It is also worth noting that the announcement of the introduction of the TOS and new privacy policy was made in a blog post one day after the terms and privacy policy were originally set to take effect.<ref>{{Cite web |title=Firefox Terms of Use - Febuary 28 |url=https://www.mozilla.org/en-US/about/legal/terms/firefox/ |url-status=dead |archive-url=https://web.archive.org/web/20250228023710/https://www.mozilla.org/en-US/about/legal/terms/firefox/ |archive-date=28 Feb 2025 |access-date=28 Feb 2025}}</ref> No other communication was made to users of the browser as of February 27th 2025. The terms of use page was then edited to read "Effective February 28, 2025"<ref name="TOS" /> following the update in the language.

Mozilla's Terms of Use no longer explicitly state that the company does not and will never sell user data. Previously, Mozilla's FAQ included the statement, "Nope. Never have, never will," when addressing whether they sell user data. The section promising not to sell personal data<ref name="faq-old">{{cite web  

}}</ref> was quietly removed from their documentation.<ref name="github-tos">{{cite web  

Before its removal, the section said:<blockquote>

Mozilla justified this change by pointing to evolving legal definitions of "data selling," particularly under the California Consumer Privacy Act (CCPA), which defines "sale" broadly to include certain data-sharing arrangements. However, the revised Terms of Use do not explicitly prohibit Mozilla from selling user data in the future, leaving open the possibility of future monetization.<ref name="tos-update" />

|url= https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV&sectionNum=1798.140.#

|website= Legilature.ca.gov

}}</ref> However, the new Terms of Use do not explicitly prohibit Mozilla from selling user data in the future, meaning they could legally do so if they chose.<ref name="tos-update" />

[[File:Firefox-privacy-lawful-bases.png|thumb|Partial screenshot of the lawful basis section for data usage from the Firefox privacy policy.]]

On February 28th, Mozilla updated the terms of use to address the concerns people were having. The section about rights and permissions given to Mozilla was reworded to be more clear:<blockquote>You give Mozilla the rights necessary to operate Firefox. This includes processing your data as we describe in the Firefox Privacy Notice. It also includes a nonexclusive, royalty-free, worldwide license for the purpose of doing as you request with the content you input in Firefox. This does not give Mozilla any ownership in that content.</blockquote>As well as this, the new terms have removed the reference to the acceptable use policy.

Mozilla have also provided an explanation for why they changed their FAQ.<ref name="tos-update" /> They say this is because different legislation has different definitions of "sale of data"and this makes it uncertain on whether a business is legally considered to be selling data. Mozilla explicitly cites the California Consumer Privacy Act<ref name="ccpa" /> with regards to how existing privacy legislation defines the sale of data. <ref group="footnotes">Mozilla in the version of the CCPA they quoted on their update (see ''[https://blog.mozilla.org/en/products/firefox/update-on-terms-of-use/ "An update on out terms of use"]'') a draf version of the CCPA. The difference in the definition used is the inclusion of "another bussiness" in the wording. [https://www.quippd.com/social/posts/2025/03/06/mozilla-quoted-an-incorrect-version-of-the-ccpa-in-their-terms-of-use-update.html "Mozilla Quoted an Incorrect Version of the CCPA in their Terms of Use update"].''Youssuff Quips'' </ref>

'' “Sell,” “selling,” “sale,” or “sold,” means selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer’s personal information by the business to a third party for monetary or other valuable consideration.''<ref name="ccpa" />

These deals involve sending search query data to search partners. Under the CCPA, if Mozilla transmitted search data in exchange for financial compensation, this could be classified as a ''"sale of data."'' This is a practice that Mozilla had already been openly taking part in.

*'''Sponsored Suggestions in Search''': Mozilla processes search queries & shares de-identified interaction data with partners, including search engines and ad networks.<ref name="firefox-privacy" />

 

*'''Lack of a Clear "Do Not Sell" Option''': The CCPA requires an explicit "Do Not Sell My Data" button, but Mozilla bundles opt-out settings under "technical and interaction data." Mozilla's privacy policy page states ''"You can opt out of having your data processed for personalization or advertising purposes by turning off “technical and interaction data” on Desktop and Mobile at any time".''<ref name="firefox-privacy" /> Firefox does have this option in the privacy and security section of the settings as of version 135 (4th February 2025).<ref>https://support.mozilla.org/en-US/kb/how-do-i-turn-do-not-track-feature?as=u&utm_source=inproduct</ref>

 

*'''Sponsored Content in Firefox's New Tab Page Involves Data Exchange''': Mozilla dReferencesisplays sponsored content and ads on the Firefox New Tab page, which may involve user interaction data being shared with advertisers.<ref name="tos-update" /> Even if the data is anonymized, the CCPA considers certain types of aggregated data as personal information if it can be linked back to users.<ref name="ccpa" />

}}</ref> This was later revised after backlash.<ref name="tos-update" />

Mozilla announced the new terms on February 26, 2025, but they had already taken effect by February 25, 2025.<ref name="tos-announce" />

}}</ref> Under the California Consumer Privacy Act (CCPA), a "sale" requires data to be transferred to a third party in exchange for monetary or other valuable consideration.<ref name="ccpa" />