Send Privacy Notice

Version 1.0, dated March 12, 2019

When Mozilla receives information from you, our Mozilla Privacy Policy describes how we handle that information. Below are the top things you should know about Firefox Send. You can also view the code here.

  • Content: Mozilla receives an encrypted copy of the file you upload but we cannot access the content or name of your encrypted file. By default, files are stored for a maximum of either 24 hours or 7 days. If you choose a download cap, the file can be deleted from our server sooner.
  • Data on your device: So that you can check status or delete files, basic information about your uploaded files is stored on your local device. This includes our identifier for the file, the filename, and the file’s unique download URL. This is cleared if you delete your uploaded file or upon visiting Send after the file expires. Note, however, that the URL will persist in your browsing history (and with whomever you shared it) until manually deleted.
  • Personal data: The following is necessary to provide the service:
    • IP addresses: We receive IP addresses of downloaders and uploaders as part of our standard server logs. These are retained for 90 days, and for that period, may be connected to activity of a file’s download URL. Although we develop our services in ways that minimize identification, you should know that it may be possible to correlate the IP address of a Send user to the IP address of other Mozilla services with accounts; and if there is a match, this could identify the account email address.
    • Firefox Account: This is required for authentication only if you wish to upload larger file sizes. Your Firefox Account record will retain aggregate data on your usage of Send: for example, if you created a Firefox Account in connection with Send, number of files sent and approximate file sizes, and how many times you’ve used the service.
  • Non-personal data: We receive the following to improve our service and performance:
    • Interaction data: This includes information such as number of people sending and receiving files, number of files uploaded and approximate file sizes, percentage of file downloaders who become uploaders, how people engage with the website (time spent, clicks, referrer information, site exit path, use of passwords).
    • Technical data: This includes information such as operating system, browser, language preference, country, timestamps, duration for file transfer, reasons for errors, reasons for file expiration.
  • Third Party Services: We use Google Cloud Platform.