Mozilla Engagement Guidelines

Purpose and Scope

At Mozilla, six core privacy principles guide our data practices and operations. This page is designed to help you apply the principles to Mozilla's engagement activities, such as email, events, online advertising, social media, surveys, and web registrations. These principles apply to all engagement activities at both Mozilla Corp and Mozilla Foundation.

Mozilla Privacy Principles

No Surprises

• Our marketing practices are described in the Mozilla privacy policy.

• Mozilla's opt-in process always clearly defines the marketing content that the subscriber will receive.

• We'll never share or sell our subscriber data with any third party.

• We include notices where photos or videos may be posted or shared (ex: Mozilla events).

• We strive to include privacy information pages, where applicable, such as on our social media pages, to provide more detail than what is in our privacy policy.

• We use first party cookies where possible in our online ads for increased transparency.

Real Choices

• We offer opt-in to email communications.

• We offer opt-out to online tracking.

• Our unsubscribe process strives to give users easy methods to opt-out.

User Control

• Email can not be a required field on a form.

• Mozilla does not buy or rent lists.

• All forms where an email opt-in is present must include both an HTML and text-only option.

Limited Data

• We carefully consider whether we really need the data before we collect it.

• We are careful about how we collect data such as birth date, that can be more sensitive, and we delete it as soon as we no longer need it.

• Facebook and Twitter sharing should be hard coded where possible and should be done through a browser window so that no data should be shared with Facebook or Twitter.

• Behavioral targeting through email (ex: if Sally clicks on an add-on link, can we send her a future newsletter that's more focused on add-ons?) would require careful consideration of Mozilla's Privacy Principles.

• Behavioral targeting through online ads is something we don't do.

Sensible Settings

• We consider new ways to implement Do Not Track.

• Once a subscriber unsubscribes, we do not send an email confirmation of the unsubscribe. After the unsubscribe, an on screen confirmation should display confirming they've been removed from the list.

• Subscribers can choose HTML or Text only email communication. Text only will disable tracking beacons.

Trusted Third Parties

• Third parties sign the data addendum and complete a vendor privacy and security review to ensure the third party's system is secure and handles data in a manner consistent with Mozilla's security and privacy principles.