[company name]Subscription Services | Privacy Notice

Version [version number], Effective [effective date]

At [company name], we design products with your privacy in mind.

Mozilla VPN protects your device's internet connections through encrypted traffic via our partner Mullvad.

Mozilla Monitor monitors your accounts for known data breaches and, in some regions, helps scan for and remove your information from the web.

Firefox Relay protects your identity with secure email and phone masking (in some regions). Our masks keep your identity private, enabling anonymous signups while blocking spam texts, junk calls, and unwanted emails.

This notice explains what data [service names] collect, share, and why. We adhere to the [company name] Privacy Policy for receiving, handling, and sharing information.

Things You Should Know

[company name] account information: These services require a [company name] account, which provides [company name] your email address, locale, and IP address. Learn more about [company name] Account data practices.

Payment information: Paid subscriptions use third-party providers (Stripe, Apple, PayPal, or Google Pay). [company name] receives your billing address, last four payment digits, and subscription status. [company name] does not store full payment details.

[company name]VPN

Interaction data: Disabled by default. If you opt in, [company name] receives data about your [company name] VPN interactions (e.g., app exclusions without specifics, device count, ad-blocking status). See VPN interaction data for full telemetry details. We use this to improve performance, stability, and measure service effectiveness.

To measure marketing effectiveness, [company name] may receive your IP address, campaign data, referral data, operating system, device type, and identifiers. [company name] shares this with Adjust but does not share or store your IP address. See Adjust documentation.

Technical data: Your IP address is temporarily logged for 90 days. For VPN, [company name] receives your client version, device information, operating system, and hardware configuration. We use this to improve performance, stability, and measure service effectiveness.

With your consent, partner Sentry.io receives technical data for error and performance monitoring. See Sentry.io's Privacy Policy.

Location data: [company name] receives and logs your IP address for 90 days to approximate your location, as service availability, pricing, and offers vary by country. We also use it for fraud and abuse prevention.

Network data: [company name] VPN encrypts your traffic and sends it to Mullvad. Neither [company name] nor Mullvad logs your network activity. See Mullvad's Privacy Policy.

[company name]Monitor

Interaction data: [company name] receives data about your service interactions (e.g., login/logout, preferences). See Monitor interaction data. [company name] may use cookies, device information, IP addresses, clear GIFs, and third-party services to understand aggregate user engagement across products, services, websites, and campaigns. We use:

HaveIbeenpwned. Receives a hashed version of your email (SHA-256 with salt) to scan for compromised data. HaveIbeenpwned retains this to scan for new breaches; you can request removal via their opt-out mechanism.

OneRep. For U.S. Monitor Plus subscribers, OneRep receives your name, email, phone, address, and birth date to scan data broker sites and request removal. OneRep retains this data until subscription ends to monitor for reappearances.

Amazon Web Services (AWS). [company name] Monitor uses AWS to email Full Reports, Breach Alerts, and Safety Tips. Data is deleted upon unsubscription.

Formstack. [company name] Monitor uses Formstack to capture optional user feedback. See Formstack Privacy Policy.

Google Analytics. [company name] Monitor uses Google Analytics for website engagement metrics to improve content. See Google Analytics' Privacy & Security. Install the Opt-out Browser Add-on to prevent data collection.

Firefox Relay

Interaction data: [company name] receives data about your Firefox Relay interactions (e.g., login/logout, preferences). See Relay interaction data. Opt out by enabling Do Not Track (DNT) in your browser.

[company name] may use cookies, device information, IP addresses, and third-party services to understand aggregate user engagement. We use:

Google Analytics places a cookie to obtain website engagement metrics and improve content. Install the Google Analytics Opt-out Browser Add-on to prevent data collection about your use of [company name] Monitor.

Technical data: [company name] receives your Relay Add-on version, device information, operating system, and hardware configuration. Your IP address is temporarily logged for 90 days. We use this to improve performance, stability, and measure service effectiveness.

Location data: [company name] receives your IP address to approximate your location, as service availability, pricing, and offers vary by country. We also use it for fraud and abuse prevention.

Firefox Relay email messages: Firefox Relay processes emails to forward from masked to primary addresses. We do not read or store message content. Undeliverable emails are kept for up to three days. The promotional email blocking feature checks headers only.

Firefox Relay masks (and where you use them): [company name] maintains your account information to associate primary and masked email addresses. Custom masks are stored for forwarding. [company name] stores creation sites, usage sites, and labels to help you find your masks. Learn how to enable and disable these features.

Firefox Relay phone calls and text messages: Firefox Relay processes your phone number and texts for forwarding. We log contacted numbers to display call/text logs, send replies, and block numbers. We do not monitor or store call content. Learn how to enable and disable these features.

Information we share: Firefox Relay shares information with contracted third parties required to protect your data:

Amazon Web Services: Firefox Relay uses AWS to receive and forward emails from masked to primary addresses. Only [company name] knows the association between your addresses.

Twilio: Twilio receives your phone number, phone mask, and contacted numbers. Twilio receives text message content but deletes records after 7 days per [company name] settings.

Other Information You Should Know

Learn about managing your data and sync settings. Access stored information and update data sharing settings by signing into your account. For personal data requests, contact us through our [contact page].

For questions about personal data or privacy practices, contact us at [compliance email address].

We respond to all data protection rights requests regardless of location, unless legally prevented or an exception applies.

Visit our forums for general support: [link to company forums].