Did the fox quietly start selling your personal data, or is this just a legal refinement?
Mozilla's Firefox has been the most prominent browser used by privacy-conscious internet users worldwide, setting it apart from other big-name, data-hungry browsers. However, in February 2025, a subtle change to Firefox's Terms of Use and Privacy FAQ sent shockwaves through the digital community, potentially dethroning it as the reigning trustworthy browser.
Most notably, it removed its longstanding promise:
Amid the uproar that followed this, Mozilla swiftly clarified:
- On Licensing: Mozilla initially used language that sounded suspiciously like owning users' data inputs. After the backlash, Mozilla narrowed this to explicitly state it does not own user content, it just uses the content to "operate Firefox" (for example, when processing your URL searches).
- On Selling Data: Mozilla admits it dropped the explicit "never sell" wording due to increasingly complex legal definitions of "sell." For example, under California's CCPA, even anonymized data shared for business partnerships might legally qualify as "selling."
Mozilla emphasizes that nothing practically changed, as it still avoids sharing personally identifiable information (PII). However, it now acknowledges that data exchanges happen under the legal umbrella of "selling", at least according to some jurisdictions. Therefore, this shift primarily stems from legal complexities:
🇺🇸 U.S. Laws (CCPA/CPRA)
Define "sell" broadly, covering almost any compensated data sharing, even if anonymized.
🇪🇺 EU's GDPR
Doesn't use "sell," but emphasizes explicit consent for data sharing. Mozilla generally complies by anonymizing data or obtaining consent.
🇿🇦 South Africa's POPIA
Permits data sharing if transparent, lawful, and consented to or anonymized sufficiently.
The summary of it is that Mozilla adapted its language to avoid unintended legal pitfalls but practically, Firefox retains one of the strictest privacy policies among the browsers out there. Here's what's genuinely being shared:
What Firefox Actually Shares
Mozilla's systems explicitly avoid sharing names, emails, or IP addresses with third parties.
While critics argue Mozilla weakened its commitment, thus opening doors to future compromises, supporters view this as a legal caution and praise Firefox's transparency and privacy innovations, like anonymization proxies.
The question now arises, what can you do not to feel any burns from the Fox's Fire? Here are some helpful tips:
Protecting Yourself from the Fox's Fire
The Fox has indeed fired its privacy clause, but it did so to make way for a new one. One that would keep up with the complicated, ever-changing data laws. While the old clause is now ashes, Firefox continues to stoke the fire that promotes data privacy as it shares limited, non-identifiable information through privacy-focused tools. It retains its position as one of the most privacy-respecting browsers. This change is a reminder that protecting privacy isn't simple since takes ongoing effort, transparency, and a willingness to face the messy details, both from companies like Mozilla and from internet users.
References & Sources
Mozilla Blog (Feb 2025), AdGuard, Ars Technica, The Register, NOYB, Reuters, Privacy Badger
Share on Twitter Share on LinkedIn Share on WhatsApp
Is your business POPIA compliant?
Non-compliance can cost up to R10 million. Ubuntu Guard helps South African SMEs understand their POPIA obligations and close the gaps before regulators come knocking.
Get a POPIA Assessment