WHAT IS THE CLOUDFLARE PROXY FOR FIREFOX PRIVATE NETWORK?
Mozilla has engaged Cloudflare to power the privacy focused service called the Firefox Private Network. The Firefox Private Network is accessible through a browser extension made available by Mozilla. Whenever the extension is active, the browser will establish a secure connection to the nearest Cloudflare data center and the Cloudflare proxy will route your web-traffic to the requested website through the Cloudflare network.
The intended use of the proxy service is to shield HTTP/HTTPS requests from eavesdropping by edge network providers such as public WiFi hotspots. Avoidance of geographical restrictions on content access is explicitly not a goal.
The Mozilla extension will always make a secure request to the Cloudflare network, regardless if the request is for TLS or plaintext content.
WHAT INFORMATION DOES THE CLOUDFLARE PROXY FOR FIREFOX OBSERVE AND LOG?
Cloudflare is a data processor for the Firefox Private Network, which means Cloudflare may only process the data according to Mozilla’s instructions. Pursuant to these instructions, Cloudflare only observes a limited amount of data about the HTTP/HTTPS requests that are sent to the Cloudflare proxy via browsers with an active Mozilla extension. The data Cloudflare processes for the Firefox Private Network is subject to Mozilla’s Privacy Policy and is not covered by the Cloudflare Privacy Policy.
When requests are sent to the Cloudflare proxy, Cloudflare will observe your IP address (known as the source IP address), the IP address for the Internet property you are accessing (known as the destination IP address), source port, destination port, timestamp and a token provided by Mozilla that indicates that you are a Firefox Private Network user (together, “Proxy Data”). All Proxy Data will be deleted within 24 hours.
When you access Internet properties that are not secured using Transport Layer Security, your HTTP request data will not be encrypted while in transit from the Firefox Private Network to the requested hostname. Cloudflare will not log your HTTP request data and will not use it for any purpose other than to provide the Firefox Proxy service.
Also pursuant to Mozilla’s instructions, Cloudflare may not use any of the data it processes except to improve the performance of the service and to assist in debugging if an issue arises.
WHAT IS THE CLOUDFLARE PROMISE?
Cloudflare understands how important your data is to you. In addition to limiting our collection and use of your data, Cloudflare also promises:
Cloudflare will not sell, license, sublicense, or grant any rights to your Proxy Data to any other person or entity without Mozilla’s explicit written permission.
Cloudflare will not combine any of the Proxy Data with any other Cloudflare or third party data in any way that can be used to identify individual end users.
Cloudflare will not transfer Proxy Data to any third party except as required by law or in response to an emergency involving the danger of death or serious physical injury, provided that the request is about a particular website.
WHAT ABOUT GOVERNMENT REQUESTS FOR CONTENT BLOCKING?
Cloudflare does not block or filter content through the Cloudflare Proxy for Firefox. As part of its agreement with Mozilla, Cloudflare is providing only proxy tunneling. If Cloudflare were to receive requests from law enforcement and government agencies to block access to domains or content through the Cloudflare resolver for Firefox, Cloudflare would, in consultation with Mozilla, exhaust its legal remedies before complying with such a request. We also commit to documenting any government requests for information or for blocking access and any emergency requests in our semi-annual transparency report, unless legally prohibited from doing so.