Firefox maker Mozilla deleted a promise to never sell its users’ personal data and is trying to assure worried users that its approach to privacy hasn’t fundamentally changed. Until recently, a Firefox FAQ promised that the browser maker never has and never will sell its users’ personal data. An archived version from January 30 says:

Does Firefox sell your personal data?

Nope. Never have, never will. And we protect you from many of the advertisers who do. Firefox products are designed to protect your privacy. That’s a promise.

That promise is removed from the current version. There’s also a notable change in a data privacy FAQ that used to say, “Mozilla doesn’t sell data about you, and we don’t buy data about you.”

The data privacy FAQ now explains that Mozilla is no longer making blanket promises about not selling data because some legal jurisdictions define “sale” in a very broad way:

Mozilla doesn’t sell data about you (in the way that most people think about “selling data”), and we don’t buy data about you. Since we strive for transparency, and the LEGAL definition of “sale of data” is extremely broad in some places, we’ve had to step back from making the definitive statements you know and love. We still put a lot of work into making sure that the data that we share with our partners (which we need to do to make Firefox commercially viable) is stripped of any identifying information, or shared only in the aggregate, or is put through our privacy preserving technologies (like OHTTP).

Mozilla didn’t say which legal jurisdictions have these broad definitions.

  • cley_faye@lemmy.world
    link
    fedilink
    English
    arrow-up
    1
    ·
    6 minutes ago

    Don’t collect anything on your own and don’t sell the things you don’t collect. Bam, problem solved.

  • Lit@lemmy.world
    link
    fedilink
    English
    arrow-up
    9
    ·
    edit-2
    4 hours ago

    please pay me if you want to sell my data. At the end of the day I am a business and need to cover operating cost.

    Is there an open source tool to generate fake user activity data for Firefox to consume?

  • nthavoc@lemmy.today
    link
    fedilink
    English
    arrow-up
    32
    ·
    8 hours ago

    I remember a time when Google wrote “Don’t be evil” all over their stuff…

    • JackbyDev@programming.dev
      link
      fedilink
      English
      arrow-up
      2
      ·
      5 hours ago

      There’s a phrase that is still very close to that in some company statement still, I sort of view it as pointless to talk about. We know they’re evil by their actions, and they were evil before they removed it in sure. If the statement is what matters, it’s still basically there, just not the motto. It’s just not worth worrying or talking about. They do so much worse shit. A friend of mine was recently let go after protesting about their response to the genocide in Gaza.

    • unemployedclaquer@sopuli.xyz
      link
      fedilink
      English
      arrow-up
      13
      ·
      7 hours ago

      dude i worked in a buncha different college libraries around the time of google’s initial ascension. Google slayed. it was awesome, in 2000.

      now? google is a drippy search engine.

  • FrostyCaveman@lemm.ee
    link
    fedilink
    English
    arrow-up
    20
    ·
    8 hours ago

    Gahhhh this is horrible

    I spent some time switching to Librewolf this morning but at the end of the day, it having Firefox as the upstream means it’s all fragile and tenuous anyway

    • Rai@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      4
      ·
      3 hours ago

      I installed Librewolf despite being a furry that loves foxes and it legit fixed every Firefox issue I had. But they were all local issues.

      • FrostyCaveman@lemm.ee
        link
        fedilink
        English
        arrow-up
        2
        ·
        2 hours ago

        Nice, what issues?

        TBH I was tempted to try IceCat first because of the name (I’m not a furry but I do think cats are cool). But no official binaries and I’m already running enough custom-compiled software, thing I need least is for my browser to be like that too haha

        • unemployedclaquer@sopuli.xyz
          link
          fedilink
          English
          arrow-up
          1
          arrow-down
          4
          ·
          edit-2
          2 hours ago

          chrome is a better browser because it’s compliant

          please note; fuck chrome and fuck google

          edit: the point is better and freer internet. if your name is musk then you have shown your trash.

          • laz@pawb.social
            link
            fedilink
            English
            arrow-up
            1
            ·
            edit-2
            1 hour ago

            Its compliant because they write fekin standards (or at least have significant sway about what becomes standard). It’s almost like monopolies are bad ^^

  • Pyr_Pressure@lemmy.ca
    link
    fedilink
    English
    arrow-up
    38
    arrow-down
    1
    ·
    10 hours ago

    They can’t just promise they “never will” and then get rid of it. People who used the service under the original agreement should still be able to claim that benefit since it was promising to never sell it.

  • wuphysics87@lemmy.ml
    link
    fedilink
    English
    arrow-up
    11
    ·
    8 hours ago

    Several questions:

    1. How are they getting our data?
    2. What is the nature of the data?
    3. Can we do anything in about:config?
    • ArchRecord@lemm.ee
      link
      fedilink
      English
      arrow-up
      12
      ·
      7 hours ago

      How are they getting our data?

      By setting up small pieces of code that trigger when you use a given feature, and send a network request to Mozilla’s servers with either a single flag set to just show a feature was used, in general, or more additional data with context (e.g. how long the text is that users are putting into their new AI sidebar feature)

      What is the nature of the data?

      This section of their Privacy Notice explains what categories of telemetry data they collect.

      Can we do anything in about:config?

      None needed. The normal settings menu has you covered. Go to Settings > Privacy & Security > Firefox Data Collection and Use > Allow Firefox to send technical and interaction data to Mozilla

  • grue@lemmy.world
    link
    fedilink
    English
    arrow-up
    133
    arrow-down
    2
    ·
    15 hours ago

    Mozilla needs to understand that I don’t want it to have my data to sell or not in the first place.

    • corsicanguppy@lemmy.ca
      link
      fedilink
      English
      arrow-up
      11
      arrow-down
      2
      ·
      14 hours ago

      Nahhh, trust them, bro. People working on other things with the same product name as their company name were great people. That should be endorsement enough.

      Wait. They have this ‘open source’ flag. If they wave it about - oooh, pretty - does that help?

    • OutlierBlue@lemmy.ca
      link
      fedilink
      English
      arrow-up
      27
      ·
      11 hours ago

      That’s the thing that bothers me about all these companies now. My data is my data, not theirs. They shouldn’t even be allowed to collect it, let alone sell it or give it to anyone who wants it.

  • drosophila@lemmy.blahaj.zone
    link
    fedilink
    English
    arrow-up
    58
    arrow-down
    3
    ·
    15 hours ago

    Since we strive for transparency, and the LEGAL definition of “sale of data” is extremely broad in some places, we’ve had to step back from making the definitive statements you know and love. We still put a lot of work into making sure that the data that we share with our partners (which we need to do to make Firefox commercially viable)

    So in other words we sell your data and get paid for it, and some countries won’t let us lie about it.

    • prole@lemmy.blahaj.zone
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 hour ago

      Yeah, I think it would be very fucking easy to say “we don’t sell your data” by any definition… Literally all you need to do is not fucking sell people’s data

  • Chadus_Maximus@lemm.ee
    link
    fedilink
    English
    arrow-up
    5
    arrow-down
    11
    ·
    5 hours ago

    Aaaand that’s why I switched to Brave. If you have shit performance and are selling my data, what’s the redeeming quality? 8gb of RAM should be enough to browse the internet. IDK why Firefox insists it isn’t…

    • Little8Lost@lemmy.world
      link
      fedilink
      English
      arrow-up
      6
      ·
      3 hours ago

      Brave did have some bad habits (and i think still has) so personally i would not trust them with my data. You could look for a firefox based browser like Zen (the most beautyful of them all) or stick to any other privacy first chromium based like vivaldi or mullvad.

      The general rule: the less features, the more privacy And if features are needed there are addons

    • Deceptichum@quokk.au
      cake
      link
      fedilink
      English
      arrow-up
      21
      arrow-down
      1
      ·
      edit-2
      16 hours ago

      There’s also Servo by the Linux Foundation and Ladybird.

      These are actual different browsers and engines all together compared to FF spin-offs.

      • bizarroland@fedia.io
        link
        fedilink
        arrow-up
        16
        ·
        16 hours ago

        I’m still super waiting for Lady Bird. I cannot wait to give it a try, but it’s gonna be like 2026 before they start rolling out builds for general use.

      • afk_strats@lemmy.world
        link
        fedilink
        English
        arrow-up
        9
        ·
        16 hours ago

        I’m excited for these to mature but they are still developing and would not recommend them for regular use

    • wizzim@infosec.pub
      link
      fedilink
      English
      arrow-up
      12
      ·
      16 hours ago

      I read somewhere that Librewolf is not recommended because they are a small team and slow to patch vulnerabilities / integrate security fixes from Firefox.

      Is it true? (Sincere question)

        • pelespirit@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          1
          ·
          16 hours ago

          I’m checking right now, but it’s kind of unclear. Correct me if I’m wrong, but it seems like Librewolf picks and chooses what to use from Firefox, yeah?

          I’m also looking into the TOR browser.

          • heavydust@sh.itjust.works
            link
            fedilink
            English
            arrow-up
            8
            ·
            edit-2
            16 hours ago

            All the forks pick and choose but features can be enabled or disabled, or removed entirely. Telemetry is always removed, whereas DRM or cookie settings can be turned off by default.

            If you want some kind of Tor browser without all the Tor thing, Mullvad has its fork too from Tor (like the fixed display as a rectangle to prevent fingerprinting).

            It’s free and open-source but it’s probably a bit annoying to use daily and it’s barebones: https://mullvad.net/en/browser

              • kusivittula@sopuli.xyz
                link
                fedilink
                English
                arrow-up
                1
                ·
                14 hours ago

                absolutely, all these hardened firefox forks on android are just as easy to fingerprint as the original. if you try creepjs, they are unique and easy to follow between visits. mullvad browser is also identified even if you clean identity and restart, but it at least blends in with some others. interestingly, i found out that cromite on android can fool creepjs. every time you refresh, it’s back to 1 visits. it doesn’t blend in like mullvad, but it seems like a different unique visitor every time.

          • bizarroland@fedia.io
            link
            fedilink
            arrow-up
            7
            arrow-down
            1
            ·
            16 hours ago

            The thing about open-source software is that if you fork the software, then your fork can have its own rules.

            You can even make the fork of the software fully closed source except for the open source software that you used to originally develop it.

            You can sell open source software as if it were proprietary.

            You can basically do anything you want with it as long as you respect the original source from the code that you have taken.

            Once the software is no longer in Mozilla’s hands, then Mozilla’s portion of the license no longer applies.

            • pelespirit@sh.itjust.works
              link
              fedilink
              English
              arrow-up
              3
              ·
              16 hours ago

              That’s what I thought, but there are many people in this very thread saying the opposite. From what I read on Librewolf’s site, it seems to back up what you are saying.

              • Balder@lemmy.world
                link
                fedilink
                English
                arrow-up
                5
                ·
                edit-2
                14 hours ago

                What @bizarroland@fedia.io is saying is not correct, because it depends on the license. For example, GPL software requires that ALL the source code that uses some GPL code to be released as GPL too. That’s why some people avoid GPL at all costs.

                Other licenses, such as LGPL allow you to link your proprietary code with open source parts and only release the code of the open source part (along with any modifications you did to it).

      • afk_strats@lemmy.world
        link
        fedilink
        English
        arrow-up
        7
        ·
        13 hours ago

        I’m considering adding it to the alternatives list I posted. Can anybody else validate their privacy policy? Seemd ok but I’m a bit iffy regarding their use of telemetry. Maybe I’m overthinking it

    • SayCyberOnceMore@feddit.uk
      link
      fedilink
      English
      arrow-up
      8
      ·
      11 hours ago

      Floorp?

      No User Tracking

      We don’t collect personal information from users. We don’t track users. We don’t sell user data. We have no affiliation with any advertising companies.

  • parmesan@lemmy.world
    link
    fedilink
    English
    arrow-up
    20
    arrow-down
    9
    ·
    12 hours ago

    Am I the only one here who’s pretty much okay with this? I do wish they’d clarify exactly what they mean by “Mozilla doesn’t sell data about you (in the way that most people think about ‘selling data’),” but having my anonymized data sold so that Mozilla can continue to operate (combined with Firefox being the best browser I’ve used in terms of both performance and flexibility - ability to install add-ons from sources outside of the Mozilla store, for example) - seems like a worthy tradeoff to me.

    They also have an option to opt-out of data collection, which I do wish was opt-in instead, but with the way every other mainstream browser operates I’m just happy the option is there at all. Let me know if there’s something I’m missing here though.

      • parmesan@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        arrow-down
        1
        ·
        6 hours ago

        I’m not trying to unilaterally defend the decision, it’s just not going to make me personally switch browsers. From what I’m hearing a lot of the viable alternatives are forks of Firefox anyway.

    • sem@lemmy.blahaj.zone
      link
      fedilink
      English
      arrow-up
      31
      ·
      11 hours ago

      The problem I have with this is that “anonymized” data in the past has often been trivial to de-anonymize. And if they can remove some promises now, they’re going to keep going in that direction. Just like Microsoft telemetry used to be less but is getting worse and worse.

    • pulsewidth@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      arrow-down
      4
      ·
      5 hours ago

      To generalise, just as Reddit is the neolib centrist hivemind and Facebook is the conservative boomer hivemind, Lemmy is some overlap of privacy/techy/ultrapolitical groups - so whenever you get this kind of news that is ultimately pretty mild and uncontroversial to most you get lots of Lemmings buttons pushed and what seems like an oversized reaction in the comments.

      Is Firefox perfect? No. Is it still the best available mainstream browser option? Yes. And if the small groups that presently use it walk away and its tiny market share (~5%) declines to a point where Firefox becomes insolvent - well then browsers will be just a two-horse race between Google (Chromium) and Apple (WebKit). Every web spec and page will be beholden to the desires of those companies - I’m sure the same Lemmings will be complaining about that too, and by then it will be too late to realize what they’ve lost.