This Privacy Notice applies to the Mozilla VPN Companion extension (hereinafter, “the Extension”). The Extension provides access to the Mozilla VPN, virtual private network that protects your connection to the internet, to keep your location and what you do online more private across your devices. Both the Extension and Mozilla VPN are owned, licensed, and operated by Mozilla Corporation ("we," "us," "our," or "Mozilla").

This Privacy Notice explains what information we collect, share, and otherwise process, and why. Your use of the Service constitutes your acceptance of this Privacy Notice.

Things you should know

In order to use the Extension, you must (i) have a Mozilla Account, and (ii) have signed up for the Mozilla VPN service through that account. Each of these is subject to its own Terms of Service and Privacy Notice:

• Mozilla Accounts are subject to the Mozilla Accounts Terms of Service and the Mozilla Accounts Privacy Notice.
• The Mozilla VPN service is subject to the Mozilla Subscription Services Terms of Service, and the Mozilla Subscription Services Privacy Notice.

The data collection, sharing, or use described in the Privacy Notices above is performed when you access or use the Accounts or VPN services, regardless of whether such access or use is facilitated by this add-on. This Notice, therefore, only applies to the Extension itself, and covers the additional data that the add-on collects and uses on top of what is or may be collected by the underlying services.

Data Collected by the Extension

If you do not opt out of technical data collection, we will automatically receive certain information when you interact with the Service:

• Technical data. We receive basic telemetry data by default, which we use to improve the performance of the Service, and to assess the use and popularity of various features. This data includes information such as the number of websites you exclude from the VPN, the number of different geographic preferences you set, and whether you have turned off VPN protection. It also includes information about whether you have completed the onboarding process, and used or seen certain features of the Extension.

We also collect the following information when you choose to provide it to us:

• Communications. If you contact us in connection with the add-on or provide feedback, we may also collect personal information, such as your name or email address, as well as any other personal information you choose to share with us.
  We may also use information about you to find and address violations of our Terms of Service or policies; investigate suspicious activity; detect, prevent, and combat harmful or unlawful behavior; and otherwise maintain the integrity of our Service.

We retain unaggregated data for six months from the date of collection, after which it is deleted.

Information We Share

Mozilla uses Glean - our internal product analytics and telemetry solution - to assess the Extension data described above, and does not share it with third parties. Data sharing related to the Mozilla VPN service is discussed in the Mozilla Subscription Services Privacy Notice.

How to Contact Us

To make requests regarding your personal information, please contact us through our Data Subject Access Request Portal. If you have other questions regarding personal information or Mozilla’s privacy practices, please contact us at compliance@mozilla.com. We respond to all requests we receive from individuals wishing to exercise their rights in accordance with applicable laws.

Information for EU, EEA, Swiss, California, Connecticut, Virginia and Utah users

Our Privacy Notice describes the purposes for which we process information about you and the categories of information we process. We do not sell personal data.

Our lawful bases for collecting and processing personal information include:

• Legitimate interests. As described in this Privacy Notice, we also receive technical and interaction data of users, which we may use to assess and improve the performance and reliability of the Mozilla VPN service or of its specific features.
• Consent. When you reach out to us and voluntarily provide us with personal data you are consenting to our collection and use of that data.

The following rights are granted by certain laws such as the General Data Protection Regulation (“GDPR”) in the EU and the California Consumer Privacy Act (“CCPA”) in California:

• The right to know what personal data is collected
• The right to know if personal data is being shared, and with whom
• The right to access your personal data
• The right to exercise your privacy rights without being discriminated against

You can delete any personal information collected by the extension by opting out of data collection in both the client and the extension settings. To make additional requests regarding your personal data, please contact us through our Data Subject Access Request Portal.

If you have any other questions regarding personal data or our privacy practices, please contact us at dpo@mozilla.com.