Mozilla Data Collective

Privacy

Privacy Policy
Last Updated: July 08, 2026

This Privacy Policy describes how Mozilla Data Collective LTD (“MDC,” “us,” “we,” “our”) collects, uses, discloses, and protects your information in connection with MDC’s owned and operated websites, currently available at https://mozilladatacollective.com/ (the “Site”), MDC’s datasets that we host or make available on behalf of our dataset contributors (the “MDC Datasets”), participate in providing data for a dataset that we commission, and any other products, services, features, or applications provided by MDC, including optional dataset creation tools and related functionalities that we make available (the “Dataset Creation Tools”) (collectively, the “Services”).

If you have any questions or concerns about this policy, email us at support@mozilladatacollective.com.

TABLE OF CONTENTS
1. Information We Collect
2. Use of Information
3. Disclosure of Information
4. Your Rights and Choices 5. International Data Transfer
6. Data Retention
7. Protection of Information
8. Children
9. Updates and Changes to This Policy
10. Contacting Us

1. INFORMATION WE COLLECT

a. Information You Provide to Us:
When you use or interact with us through our Services, such as when you use our Site, register to receive MDC Datasets, use our Dataset Creation Tools, or participate in creating a dataset that we commission, you may provide the following types of information to us:

Registration information, such as your name, email, information related to your organization (such as the organization name), and any other information you provide in connection with signing up for the Services;
Payment information (we don’t collect this information directly; our payment processor processes payments on our behalf);
Commercial information, such as a record of the content on our Site that you experience, or details about your purchases and other interactions with us;
Rough geolocation (which may be inferred from your IP address);
Interactions you initiate or otherwise have with the MDC team or on our Services (such as when you interact with our search or chatbot functionalities),
Other information or identifiers you provide to us, such as for business, billing or payment purposes; and

In limited cases, such as where you request access to particular types of MDC Datasets, we may request additional documentation to verify your ability to access such Datasets, which may vary based on the circumstances.

Additionally, when you use MDC’s Dataset Creation Tools, we may collect or process information that you choose to upload, create, or generate through those tools. This may include:

Files you upload (such as images, audio, video, text, or other materials);
Content you capture directly through the Dataset Creation Tools (for example, recordings or other inputs);
Annotations, labels, transcripts, or other information you create to organize or describe your data;
Data generated through the Tools (such as transcripts or formatted dataset files); and
Technical or session-related information necessary to enable the creation, storage, export, and deletion of your dataset.

Depending on how the Dataset Creation Tools are configured, this information may be processed locally within your browser (without being transmitted to our servers), or temporarily on our systems to enable certain features and functionality.

You should not upload or include personal data or other sensitive information in Dataset Creation Tools unless you have the necessary rights and permissions to do so and such use is expressly permitted under applicable terms or law. Certain types of information may be restricted or prohibited from use with the Dataset Creation Tools.

b. Cookies and Other Technologies
Through our online properties, using platform analytics technology, we may collect information from your computer or other device by automated means such as cookies, web beacons, local storage, JavaScript, mobile-device functionality and other computer code. This information may include unique browser identifiers, IP address, browser and operating system information, device identifiers, other device information, Internet connection information, as well as details about your interactions with the relevant website, email or other online property (for example, the URL of the third-party website from which you came, the pages on our Sites that you visit, and the links you click on in our website). In some cases (such as cookies), the tools described here involve storing unique identifiers or other information on your device for later use. We and certain analytics technology, such as Google Analytics, may use this information to better understand how our users use our Services.

c. Information From Third Parties and Certain Mozilla Projects
We act as a vendor with respect to the MDC Datasets provided by contributors to the Services. In some cases, MDC may commission, curate, or otherwise develop datasets directly or in collaboration with our partners. In those circumstances, MDC may determine the purposes and means of processing the information included in such datasets and may act as a data controller (or equivalent under applicable law) with respect to that information, and process such information in accordance with this Privacy Policy, which may include voice data related to participants in the commissioned dataset.

In order to provide the MDC Datasets, we also rely on Mozilla’s Common Voice datasets and other data we receive from contributors. This data includes voice recordings and voluntarily-provided demographic data (such as information that was voluntarily tagged to the recordings, including accent, age, and gender). This dataset is released without any associated personal information or personal data, i.e., the released audio segments are not reasonably linkable by a listener to any individual or device.

Additionally, as part of providing the MDC Datasets, we work with data providers to host and/or make available their datasets on our Services, which may include without limitation, voice recordings, audio and text data, images, documents, and other information that may relate to individuals. As noted above, we act as a vendor to the provider of these. Depending on the dataset, MDC’s role may vary. In some cases, MDC acts solely as a service provider or processor on behalf of a dataset contributor. In other cases, including where MDC commissions or directs the creation of datasets, MDC may act as a controller and determine how such data is processed.

We may also receive information from entities, including our service providers, affiliates, and partners such as analytics technology, payment processors, and publicly available sources, such as social media websites.

We may combine the information we collect about you from these various sources and treat it in accordance with this Privacy Policy, for the purposes of delivering the MDC product to you.

2. USE OF INFORMATION

We and our vendors and service providers use the information described above for the following purposes:

Manage and improve the Services generally;
Process your registration and verify your information;
Facilitate access and purchases through the Services;
Enable you to create, organize, annotate, and structure datasets through the Dataset Creation Tools;
To develop datasets in connection with our commissioning agreements with partners;
Send you confirmations, updates, security alerts, and support and administrative messages;
Conduct platform promotion and update marketing activities (including by email or social media);
Conduct business operations such as auditing, security, fraud prevention, invoicing and accounting, analytics (including with analytics technology), and research and development;
Analyze your use of the Services (such as understanding interactions on the Site and with the MDC Datasets) to understand how our users use the Services and improve the Services, including with the help of analytics technology;
Protect against, identify, investigate, and respond to misuse of the Services or other unlawful behavior;
Address legal requirements;
Establish, exercise, or defend our legal rights; and
Create aggregated or de-identified information.

Legal Bases for Processing. The laws in certain jurisdictions (such as those in the European Union and United Kingdom), require us to inform you of the "legal bases" on which we process your information. The legal bases for using your information as set out in this Privacy Policy are as follows:

Where we need to perform the contract we are about to enter into or have entered into with you for the Services.
Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
Where we need to comply with a legal or regulatory obligation.
Where we have your consent to process your information in a certain way.

3. DISCLOSURE OF INFORMATION

We may disclose your information as follows:

To vendors and service providers: We disclose information to companies that provide services to us, such as for data storage, payment processing, analytics, security, fraud prevention, billing, collections and marketing. We may engage a vendor to help us host or operate any aspect of the Services, including any mechanism through which we send or receive communications, such as our email systems and our Site.
To analytics providers: We disclose information about you to our analytics provider to help us better understand your use of the Services and customize the Services. You may opt out of having Google Analytics use your information for analytics by installing the Google Analytics Opt-out Browser Add-on.
To affiliates: We may disclose information to current or future parents, subsidiaries, affiliates, and other organizations under common control or ownership with MDC.
To participants of MDC: As part of providing the MDC Datasets, we may disclose datasets containing voice recordings and other information to individuals participating in the Collective. In some cases, dataset contributors may require certain basic information (such as name, affiliation, and contact information) prior to allowing other members to access their dataset.
In connection with legal matters: We may disclose information when we believe disclosure is appropriate due to a subpoena or similar investigative demand, a court order, or other request from a law enforcement or government agency; or as otherwise required by law.
For the protection of MDC and others: We may disclose information when we believe disclosure is appropriate in connection with efforts to investigate, prevent, or take other action regarding illegal activity, suspected fraud or other wrongdoing; to protect and defend the rights, property or safety of our organization, our employees, our partners, or others; and to enforce our contracts.
In connection with mergers or acquisitions: We may disclose information to an entity that acquires all or any part of our assets or in a merger or acquisition, or in connection with due diligence for a proposed transaction.
In other situations: We may also disclose your information in other situations where legally permitted, including in order to perform tasks or services that you have requested.

We may use and disclose appropriately aggregated or de-identified information for any purpose.

4. YOUR RIGHTS AND CHOICES

a. Marketing Communications
You can unsubscribe from MDC marketing emails by clicking the unsubscribe link in a marketing email or contacting us at support@mozilladatacollective.com.

b. Cookies and Other Similar Technologies
You can make certain choices regarding the use of cookies and similar technologies. If you replace, change, upgrade or reset your browser or device, or delete your cookies, or if you use a browser that automatically clears your cookies, you may need to update your choices again.

As mentioned above, you may be able to set your browser to refuse certain types of cookies, or to alert you when certain types of cookies are being used. Some browsers offer similar settings for HTML5 local storage and other technologies too. However, if you block or otherwise reject all cookies, local storage, JavaScript or other technologies, certain websites may not function as expected.

We do not respond to browser-based do-not-track signals.

c. Rights Regarding Your Information
Depending on where you live, your local laws (including those in the European Union, United Kingdom, and elsewhere) may provide you certain rights regarding your information, including:

Right to know the categories and specific pieces of personal information we have collected, used, or disclosed;
Right to delete, correct, or update your personal information;
Right to prevent the processing of your information for direct marketing purposes (including any direct marketing processing based on profiling, if any);
Right to restrict the way that we process and disclose certain information about you;
Right to object to certain processing of your personal information;
Right to revoke your consent for the processing of your personal information;
Right to opt out of the sale or sharing/processing of your personal information for targeted advertising purposes;
Right to be free from discrimination for exercising your rights; and
Right to data portability.

Please note: Your rights and our responses will vary based on your state or country of residency. You may be located in a jurisdiction where we are not obligated, or are unable, to fulfill a request. In such a case, your request may not be fulfilled.

If you would like information regarding your rights or would like to make a request (or if you are an authorized agent acting in accordance with applicable law), please email us at support@mozilladatacollective.com.

We will take reasonable steps to verify your identity and requests, including by verifying your account information, residency or the email address you provide. If you are an authorized agent submitting a request on behalf of another individual, we may require proof of your written authorization before processing the request.

Certain information may be exempt from such requests under applicable law such as information we retain for legal compliance and to secure, provide and audit our Services. We may need certain information in order to provide the Services to you; if you ask us to delete it, you may no longer be able to use the Services.

Residents of certain jurisdictions may appeal the denial of a request by emailing us at support@mozilladatacollective.com.

e. Shine the Light (California only)
California’s Shine the Light Law (CA Civil Code § 1798.83) allows residents with which a business has an established business relationship to request a list of the third parties to which the business has disclosed certain “personal information” (as specifically defined by the Shine the Light law) during the preceding year where the business knows or reasonably should know that the third parties used the personal information for the third parties’ own "direct marketing purposes,” defined by the Shine the Light law as the use of personal information to solicit or induce a purchase, rental, lease, or exchange of products, goods, property, or services directly to individuals by means of the mail, telephone, or electronic mail for their personal, family, or household purposes. However, the business is not required to provide this information where the business adopts and discloses, in its privacy policy, a policy of not disclosing “personal information” to third parties for their “direct marketing purposes” 1) unless the resident first affirmatively agrees or 2) if the resident has exercised an option that prevents that information from being disclosed. Mozilla Data Collective maintains such a policy and thus is not required to provide this information. Mozilla Data Collective does not engage in any disclosures in which it knows or reasonably should know that the third parties use the personal information for their own direct marketing purposes as defined by Shine the Light.

5. INTERNATIONAL DATA TRANSFER

We are headquartered in the United Kingdom, though we generally store the information described in this Privacy Policy in the European Union. There may be circumstances where your data is transferred to another country, such as the U.S. If you are located elsewhere in the world, then certain of the privacy laws applicable to that information may not provide as much protection as the laws of your country where you live. For this reason, your personal information may be subject to disclosure to the governments, courts or law enforcement or regulatory agencies of any of the countries where we (or the recipients of disclosures mentioned in this Privacy Policy) operate, pursuant to the laws of such countries. However, this Privacy Policy applies to MDC’ operations worldwide. To the extent that personal information is transferred from the European Economic Area (“EEA”) and the UK to any non-EEA members of our group or third-party processors who handle the information solely on our behalf, we will take appropriate measures to ensure such companies protect your information adequately in accordance with this Privacy Policy. These measures include signing Standard Contractual Clauses in accordance with EEA and UK data protection laws to govern the transfers of such data. For more information about these transfer mechanisms, please contact us as set out below.

6. DATA RETENTION

We keep your information until after we determine it is no longer necessary for the purposes described in this Privacy Policy and we are not legally required to retain it for longer.

7. PROTECTION OF INFORMATION

To help protect personal information, we have put in place physical, technical, and administrative safeguards. However, no such safeguards are 100 percent effective. Therefore, we cannot assure you that data that we collect under this Privacy Policy will never be used or disclosed in a manner that is inconsistent with this Privacy Policy.

Mozilla Data Collective Privacy Notice