Mozilla deletes promise to 'never sell' your data. Has it really backed out on its word?
Mozilla, the company behind the open-source Firefox browser, has long prided itself on standing apart from tech giants like Google. Unlike Google, which has a rich history of collecting user data even if you try to say ‘no’, Mozilla has consistently insisted — and generally followed through — that user controls in Firefox aren’t a smokescreen and that it puts privacy front and center. Mozilla’s Privacy FAQ still greets you with a subheading in bold: “We Stand for People over Profit.”
The promise that’s no longer there
In late February, Mozilla updated its Privacy FAQ, the Firefox TOS, and Firefox’s own Privacy FAQ. The TOS underwent a major overhaul, while the FAQs changed in ways that many didn’t catch until eagle-eyed users started digging.
Let’s start with the TOS. The new version, effective since February 25, includes some language that has many users scratching their heads. Specifically, it now states that “when you upload or input information through Firefox, you hereby grant us a nonexclusive, royalty-free, worldwide license to use that information to help you navigate, experience, and interact with online content as you indicate with your use of Firefox.”
This update triggered a flood of comments on Reddit, with users taking exception to the wording. Some criticized the language for being too vague, while not inherently and necessarily nefarious. Others were ringing alarm bells, and rather loudly: “For frick's sake I don't want you to use information typed in to Firefox, Mozilla. Whatever I type into the browser window is between me and whatever service I'm sending the information to, not you, Mozilla,” one Redditor ranted.
Others were still more willing to give Mozilla the benefit of the doubt: “I believe the Mozilla Foundation is trying to do the right thing, but this kind of language in the terms is ripe for abuse. I hope they clarify it.”
In response to the backlash, Mozilla updated its blog post to try and clear things up, saying:
We’ve seen a little confusion about the language regarding licenses, so we want to clear that up. We need a license to allow us to make some of the basic functionality of Firefox possible. Without it, we couldn’t use information typed into Firefox, for example. It does NOT give us ownership of your data or a right to use it for anything other than what is described in the Privacy Notice.
However, this attempt at clarification only seemed to stir the pot further. Mozilla claimed they needed the license to make basic Firefox features work, but didn’t explain why they needed access to what you type in. This arguably left even more questions unanswered.
Things didn’t stop there. Compounding the matters, Mozilla made two other changes to its Privacy FAQ and Firefox Privacy FAQ respectively, that ruffled feathers even more.
Previously, Mozilla's Privacy FAQ proudly stated that they “don’t sell data about you,” nor do they buy data about you. Below is a screenshot of the FAQ from February 6:
The updated version now reads that Mozilla “does not sell data about you” but “in the way that most people think about “selling data”. This immediately makes you wonder, whether you’re the ‘most people’ and what’s all this really supposed to mean.
Current version of Mozilla’s Privacy FAQ
Even more confusing — and arguably more disheartening for users — was the removal of Mozilla’s bold promise to “never sell your data” from its Firefox Privacy FAQ. Previously, the FAQ had answered the question “Does Firefox sell your personal data?” with a resounding “Nope. Never have, never will. And we protect you from many of the advertisers who do.”
Now (as of the time of writing), the section is missing completely from Firefox’s Privacy FAQ:
To be fair, the section appears to be under construction, and it’s likely we’ll soon see a replacement to the promise that had been dear to many of Firefox’s users.
And while some might have been taken off guard by an apparent change of heart on behalf of Mozilla, this new language isn't coming as a surprise to those who’ve been paying close attention to Mozilla lately. Here’s why.
Mozilla’s slow descent into ad tech
One of Mozilla’s core principles has always been its commitment to user privacy, with a foundational promise not to sell data. However, over the past few years, and more noticeably, months, that promise has started to fade, and the pillars supporting it have shown signs of crumbling.
Back in October, Mozilla made official what many had been predicting: its move into the ad-tech space. In a blog post, Mozilla president Mark Surman raised a question: “How do we ensure that privacy is not a privilege of the few, but a fundamental right available to everyone?” He went on to suggest that one part of the solution lies in “online advertising,” arguing that the system is “fundamentally broken.” Mozilla, according to Surman, is experimenting with advertising as a way to fix it.
For what it’s worth, Mozilla is following a well-worn path that many tech companies took before it. Much like Google and Microsoft, which have rolled out features like Google’s Protected Audience API and Microsoft’s Ad Selection API, Mozilla is now attempting to blend privacy with advertising. However, advertising has never been a major part of Mozilla’s DNA — until quite recently.
The shift has taken time to shape up, but it’s becoming much clearer now. Just last summer, Mozilla made waves by acquiring Anonym, an ad metrics company. The goal? They claim it will improve ad targeting while safeguarding user data. Not long after, Mozilla rolled out Privacy-Preserving Attribution (PPA), a feature designed to let advertisers track the effectiveness of their ads without crossing the line into intrusive tracking. PPA was enabled by default in Firefox.
Time to ditch Firefox?
The latest changes to Mozilla’s Terms of Service and Privacy FAQs seem to reflect its growing focus on advertising.
As the company becomes more deeply entangled in the ad-tech industry, its long-standing promises about privacy are starting to feel less clear-cut. What once seemed like an unwavering dedication to protecting user data is now being tested by the growing push to make privacy compatible with advertising. For many users, this raises the question: how much is Mozilla really willing to compromise? While the answer is not yet clear, bidding farewell to that bold, albeit idealistic, promise feels sad. It might mark the end of an era — and, even sadder, that end may be inevitable.