-
Notifications
You must be signed in to change notification settings - Fork 107
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Update subscription_services_privacy_notice.md (#1941)
* Update subscription_services_privacy_notice.md Updating for Firefox Accounts > Mozilla Accounts change and other formatting changes. This Notice will be in place from 1 Nov 23 to 29 Nov 23, when it will be replaced with a version which also encompasses Monitor * Update subscription_services_privacy_notice.md * Update subscription_services_privacy_notice.md addressing Peiying's comments --------- Co-authored-by: Michael <[email protected]>
- Loading branch information
1 parent
844551e
commit 089a6d4
Showing
1 changed file
with
26 additions
and
19 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,56 +1,63 @@ | ||
# Mozilla Subscription Services | Privacy Notice | ||
|
||
Version 1.0, Effective October 11, 2022 | ||
{: datetime="2022-10-11" } | ||
Version 1.1, Effective November 1, 2023 | ||
{: datetime="2023-11-01" } | ||
|
||
## At Mozilla, we design products with your privacy in mind. | ||
|
||
__Mozilla VPN__ protects your device’s internet connections. Mozilla partners with Mullvad to privately and securely encrypt your internet traffic. | ||
|
||
__Firefox Relay__ allows you to keep your primary email address and phone number safe and private from online services by making a unique, random (mask) phone number and email address(es). | ||
__Firefox Relay__ protects your identity with secure email and phone masking. Our secure and easy to use email and phone masks help keep your identity private so you can sign up for new accounts anonymously, stop spam texts and junk calls, and get only the emails you want in your inbox. | ||
|
||
This privacy notice explains what data Firefox Relay and Mozilla VPN collect, share, and why. We also adhere to the [Mozilla Privacy Policy](https://www.mozilla.org/privacy/) for how we receive, handle, and share information. | ||
|
||
## Things You Should Know | ||
|
||
__Firefox account information.__ These Services require a Firefox account, which sends Mozilla your email address, locale, and IP address. Learn more about [Firefox Account data practices](https://www.mozilla.org/privacy/firefox/#firefox-accounts-join-firefox). | ||
__Mozilla account information.__ These Services require a Mozilla account, which sends Mozilla your email address, locale, and IP address. Learn more about [Mozilla Account data practices](https://www.mozilla.org/privacy/mozilla-accounts/). | ||
|
||
__Payment information.__ When you subscribe to the Services, you will send payment through one of our third-party payment providers: Stripe, Apple, PayPal, or Google Pay. Mozilla receives a record of your account (including your billing address and the last four digits of your payment method) and the status of your account’s subscription. Mozilla does not store your full payment details. | ||
|
||
__Interaction data.__ Mozilla receives data about your interactions with the Services. For instance, when you log in and out, the preferences you set. Learn more about [VPN interaction data](https://dictionary.telemetry.mozilla.org/apps/mozilla_vpn) and [Relay interaction data](https://github.com/mozilla/fx-private-relay/blob/main/METRICS.md). | ||
### Mozilla VPN {: #vpn } | ||
|
||
__Technical data.__ Mozilla receives basic information about the installed version of your VPN or Relay Add-on software, and the device they are installed on, including the operating system and hardware configuration. Your IP address is temporarily collected as part of our server logs for 90 days. No server logs of your network activity are maintained by neither Mozilla nor our partner Mullvad when you're using the Mozilla VPN service. | ||
We use the data to improve performance and stability for our users, and to measure the Services’ performance. | ||
__Interaction data.__ Mozilla receives data about your interactions with Mozilla VPN. For example, we would be able to know things like if you’ve excluded any Apps from protection (but not which ones), in how many devices you are using your Mozilla VPN Subscription, and whether or not you’ve enabled the ads blocking feature. For a full review of our telemetry, you can learn more in [VPN interaction data](https://dictionary.telemetry.mozilla.org/apps/mozilla_vpn). We use Interaction data to improve performance and stability for our users, and to measure the Services’ performance. | ||
|
||
### Mozilla VPN {: #vpn } | ||
In addition, to help understand the effectiveness of our marketing campaigns, Mozilla may receive your IP address in addition to campaign data and referral data like what ad campaigns you engaged with and your operating system, device type, device identifiers, and operating system version. Mozilla shares this with Adjust, but we do not share or store your IP address. Read the [Adjust documentation](https://github.com/mozilla-mobile/mozilla-vpn-client/blob/main/src/adjust/adjust.md). | ||
|
||
__Location data.__ Mozilla VPN receives your IP address when you sign up for and use the service. We use the IP address in order to approximate your location to set which VPN server you connect to and because Mozilla VPN availability, pricing and offers may depend on your country. | ||
__Technical data.__ Across Subscription Services, your IP address is temporarily collected as part of our server logs for 90 days. For VPN, Mozilla also receives information about the installed version of your Mozilla VPN client software, and the devices they are installed on, including their operating systems and hardware configuration. We use Technical data to improve performance and stability for our users, and to measure the Services’ performance. In addition, our partner Sentry.io will receive technical data for error and performance monitoring purposes. Learn more at [Sentry.io’s Privacy Policy](https://sentry.io/privacy/). | ||
|
||
__Campaign and referral data.__ This helps Mozilla VPN understand the effectiveness of our marketing campaigns. Upon installation of the app, Mozilla may receive your IP address in addition to campaign data and referral data like what ad campaigns you engaged with and your operating system, device type, device identifiers, and operating system version. Mozilla shares this with Adjust, but we do not share or store your IP address. Read the [Adjust documentation](https://github.com/mozilla-mobile/mozilla-vpn-client/blob/main/src/shared/adjust/adjust.md). | ||
__Location data.__ Mozilla Subscription Services receives your IP address when you sign up for and use the service(s) and it is collected as part of our servers logs for 90 days; we use the IP address in order to approximate your location because Mozilla Subscription Services availability, pricing and offers may depend on your country. We also use it for fraud and abuse prevention purposes across our products. | ||
|
||
__Network data.__ Mullvad receives your internet traffic to provide the service. When you activate Mozilla VPN, it will encrypt your internet traffic and send it to Mullvad. Mullvad has committed not to log any of the data it receives. Learn more at [Mullvad’s Privacy Policy](https://mullvad.net/help/no-logging-data-policy/). | ||
__Network data.__ When you activate Mozilla VPN, it will encrypt your internet traffic and send it to Mullvad. No logs of your network activity are maintained by either Mozilla nor our partner Mullvad when you're using the Mozilla VPN service. Learn more at [Mullvad’s Privacy Policy](https://mullvad.net/help/no-logging-data-policy/). | ||
|
||
### Firefox Relay {: #relay } | ||
|
||
__Email messages.__ To send and forward your email messages from your masked email address(es) to your primary email address, Firefox Relay processes your email messages. We do not read or store the content of any of your messages. In the event that an email cannot be delivered to you, we will keep it on our servers and delete it after it has been delivered (in no event will we hold onto it for more than three days). If you use the feature to block promotional emails, the Service will check email headers to determine whether the email should be blocked. | ||
__Interaction data.__ Mozilla receives data about your interactions with the Services. For instance, when you log in and out and the preferences you set; learn more about [Relay interaction data](https://github.com/mozilla/fx-private-relay/blob/main/METRICS.md). We use Interaction data to improve performance and stability for our users, and to measure the Services’ performance. | ||
|
||
In addition, to help understand the effectiveness of our marketing campaigns, Mozilla may receive your IP address in addition to campaign data and referral data like what ad campaigns you engaged with and your operating system, device type, device identifiers, and operating system version. Mozilla shares this with Adjust, but we do not share or store your IP address. Read the [Adjust documentation](https://github.com/mozilla-mobile/mozilla-vpn-client/blob/main/src/adjust/adjust.md). | ||
|
||
__Technical data.__ Mozilla receives basic information about the installed version of your Relay Add-on software, and the device they are installed on, including the operating system and hardware configuration. Across Subscription Services, your IP address is temporarily collected as part of our server logs for 90 days. We use technical data to improve performance and stability for our users, and to measure the Services’ performance. | ||
|
||
__Location data.__ Mozilla Subscription Services receive your IP address when you sign up for and use the service(s). We use the IP address in order to approximate your location because Mozilla Subscription Services availability, pricing and offers may depend on your country. We also use your IP address for fraud and abuse prevention purposes across our products. | ||
|
||
__Firefox Relay email messages.__ To send and forward your email messages from your masked email address(es) to your primary email address, Firefox Relay processes your email messages. We do not read or store the content of any of your messages. In the event that an email cannot be delivered to you, we will keep it on our servers and delete it after it has been delivered (in no event will we hold onto it for more than three days). If you use the feature to block promotional emails, the Service will check email headers to determine whether the email should be blocked. | ||
|
||
__Masks and where you use them.__ Mozilla maintains a copy of your account information to provide the service, in particular to associate your primary email address with your masked email address(es). If you create a custom mask, Mozilla stores it in order to forward emails to it. Mozilla stores the site where you created the mask, sites where you subsequently use the mask, and any labels associated with the mask in order to ensure that your masks are easily findable when you’re ready to use them. Learn how to [enable and disable these features](https://relay.firefox.com/faq). | ||
__Firefox Relay masks (and where you use them).__ Mozilla maintains a copy of your account information to provide the Service, in particular to associate your primary email address with your masked email address(es). If you create a custom mask, Mozilla stores it in order to forward emails to it. Mozilla stores the site where you created the mask, sites where you subsequently use the mask, and any labels associated with the mask in order to ensure that your masks are easily findable when you’re ready to use them. Learn how to [enable and disable these features](https://relay.firefox.com/faq). | ||
|
||
__Phone calls and text messages.__ To send and forward your phone calls and text messages, Firefox Relay processes your phone number and text messages. We store a log of the phone numbers you’ve contacted through Relay in order to show your call and text logs, send text replies and block phone numbers. We do not monitor or store the content of phone calls you make through Firefox Relay. | ||
__Firefox Relay phone calls and text messages.__ To send and forward your phone calls and text messages, Firefox Relay processes your phone number and text messages. We store a log of the phone numbers you’ve contacted through Relay in order to show your call and text logs, send text replies and block phone numbers. We do not monitor or store the content of phone calls you make through Firefox Relay. | ||
|
||
Read the telemetry documentation for [Firefox Relay](https://github.com/mozilla/fx-private-relay/blob/main/METRICS.md). You can opt-out of telemetry collection by turning on the [Do Not Track (DNT)](https://support.mozilla.org/kb/how-do-i-turn-do-not-track-feature) feature in your browser. | ||
|
||
__Information We Share.__ Firefox Relay shares information with third parties to provide the service to you. Mozilla has contracted with this company requiring them to protect your information. Here’s who we use to support Firefox Relay: | ||
__Information we share.__ Firefox Relay shares information with third parties to provide the service to you. Mozilla has contracted with this company requiring them to protect your information. Here’s who we use to support Firefox Relay: | ||
|
||
* __[Amazon Web Services.](https://aws.amazon.com/privacy/)__ Amazon Web Services (AWS) is a cloud-computing platform. Firefox Relay uses AWS to receive emails sent to your masked email address(es) and to forward them to the primary email address associated with your Firefox account. Only Mozilla knows the association between your primary email address and your masked email address(es). | ||
* __[Amazon Web Services.](https://aws.amazon.com/privacy/)__ Amazon Web Services (AWS) is a cloud-computing platform. Firefox Relay uses AWS to receive emails sent to your masked email address(es) and to forward them to the primary email address associated with your Mozilla account. Only Mozilla knows the association between your primary email address and your masked email address(es). | ||
|
||
* __[Twilio.](https://www.twilio.com)__ Twilio receives your phone number, your phone mask, and the phone numbers that you exchange phone calls and text messages with. Twilio also receives the content of text messages you send and receive through Firefox Relay and Mozilla has set the Twilio service to delete its records of the text messages you send and receive through Firefox Relay after 7 days. | ||
* __[Twilio.](https://www.twilio.com/en-us/legal/privacy)__ Twilio receives your phone number, your phone mask, and the phone numbers that you exchange phone calls and text messages with. Twilio also receives the content of text messages you send and receive through Firefox Relay and Mozilla has set the Twilio service to delete its records of the text messages you send and receive through Firefox Relay after 7 days. | ||
|
||
## Other Information You Should Know | ||
|
||
Much of the information that we store about our Firefox account users is easily accessible by logging into your account. You can [learn more about managing your data](https://support.mozilla.org/products/privacy-and-security/user-control). To make requests, please contact us through our [Data Subject Access Request Portal](https://privacyportal.onetrust.com/webform/1350748f-7139-405c-8188-22740b3b5587/4ba08202-2ede-4934-a89e-f0b0870f95f0). | ||
You can learn more about [managing your data](https://support.mozilla.org/kb/firefox-accounts-managing-account-data) and how to [enable or disable sync](https://support.mozilla.org/kb/how-do-i-set-sync-my-computer). Also, much of the information that we store about our Mozilla account users is easily accessible by [signing in](https://accounts.firefox.com/signin) to your account, where you can also update your [data sharing settings](https://accounts.firefox.com/settings/). To make requests regarding your personal data, please contact us through our [Data Subject Access Request Portal](https://privacyportal.onetrust.com/webform/1350748f-7139-405c-8188-22740b3b5587/4ba08202-2ede-4934-a89e-f0b0870f95f0). | ||
|
||
If you have any other questions regarding our privacy practices, please contact us at [email protected]. | ||
If you have any other questions regarding personal data or our privacy practices, please contact us at [email protected]. | ||
|
||
We respond to all requests we receive from individuals wishing to exercise their data protection rights regardless of where the individual lives. We will honor your request unless a legal requirement prevents us from doing so or a legal exception applies. | ||
|
||
|