{
  "trust_level": "claimed",
  "official_brand_source": false,
  "verification_method": null,
  "verified_domain": null,
  "verified_at": null,
  "verification_last_checked_at": null,
  "verification_expires_at": null,
  "status": "active",
  "customer_handle": "firefox-8df36a3b",
  "certification_status": "not_certified",
  "registry_certified": false,
  "certification": null,
  "brand_name": "Firefox",
  "response_scope": "full_tree",
  "integrity": {
    "version": 2,
    "publication_id": "c10204b24f515d7112f41e4f7df592949cee39b7ca9af6f6918282f586073708",
    "revision_id": "795602e4-61d9-46aa-8740-18553b488581",
    "manifest_sha256": "85e6acb906fbb7688894f2a5c200b6f3c2fd45a31819fe5953c717a645d7dec0",
    "manifest_signature": "fIjPaqcFAt/B4E1rhCU4ROW/zBpTCT8uWxYyfA3BGD9FHnk7wBn55yAcFE4l4gyiLGsL0MUiTFm9Znl+l1R5CA==",
    "manifest_signature_kid": "v1"
  },
  "verified": null,
  "schema": "bcp-readable-package-v1",
  "integrity_scope": "publication_manifest",
  "representation": "Derived readable representation; verify signatures against the canonical source files.",
  "canonical_registry_url": "https://registry.brandcontextprotocol.dev/brands/firefox-8df36a3b",
  "html_url": "https://registry.encodedbrands.ai/brands/firefox-8df36a3b",
  "files": [
    {
      "path": "/.well-known/brand/claims.md",
      "content": "---\nbcp_version: \"1.1.1\"\nfile_type: claims\nparent: https://registry.brandcontextprotocol.dev/firefox-8df36a3b/.well-known/brand.md\nlast_updated: 2026-09-14\n---\n\n# Claims\n\nAll marketing claims Firefox and Mozilla are authorized to make. Agents generating copy must draw from this file. Do not introduce claims absent from this file.\n\n> **Legal review notice:** Claims below are compiled from available public evidence and owner-confirmed interview statements. `proof_status` records evidence and owner-confirmation state. It is not legal advice and does not replace review by Legal or the accountable brand owner before use in advertising, packaging, sales, regulated, or comparative contexts.\n\n---\n\n## Approved at launch\n\n```yaml\napproved_at_launch:\n\n  - claim: >\n      Firefox blocks trackers automatically and protects your privacy by\n      default, so you can browse confidently without becoming a privacy expert.\n    tier: default\n    proof_status: approved\n    owner: \"[gap]\"\n    validity_window:\n      valid_from: 2026-09-14\n      valid_until: null\n    source_hash: \"e919c1473ffe62b180ddd283c6556c8e9b2146eb0c9f589fa92304861bed152b\"\n    exact_text: true\n    approved_language: >\n      Firefox blocks trackers automatically and protects your privacy by\n      default, so you can browse confidently without becoming a privacy expert.\n    evidence: >\n      First-party claim published on firefox.com/features (retrieved\n      2026-09-14). Owner confirmed in interview that rights-based and\n      governance framing is approved for agent use, with caveats on scope\n      (see requires_caveat section).\n\n  - claim: >\n      Mozilla does not sell personal browsing profiles or profit from\n      cross-site tracking; privacy-preserving safeguards protect user\n      identities across its limited commercial partnerships.\n    tier: default\n    proof_status: approved\n    owner: \"[gap]\"\n    validity_window:\n      valid_from: 2026-09-14\n      valid_until: null\n    source_hash: \"853b536dfe92cfb4b667db77a104a5b23adcad0a6a8dd201ab60b6e510254b4b\"\n    exact_text: false\n    approved_language: null\n    evidence: >\n      Owner confirmed in interview. Mozilla's public blog post (blog.mozilla.org,\n      retrieved 2026-09-14) explicitly states: \"Mozilla doesn't sell data about\n      you (in the way that most people think about 'selling data'), and we don't\n      buy data about you.\" Approved framing distinguishes traditional data\n      brokerage from privacy-preserving product monetization. Blanket\n      \"we never sell your data\" language is forbidden (see forbidden section).\n\n  - claim: >\n      Unlike ad-first platforms, Firefox does not monetize individual web\n      activity; data associated with built-in partner features is aggregated\n      or anonymized to prevent personal identification.\n    tier: default\n    proof_status: approved\n    owner: \"[gap]\"\n    validity_window:\n      valid_from: 2026-09-14\n      valid_until: null\n    source_hash: \"853b536dfe92cfb4b667db77a104a5b23adcad0a6a8dd201ab60b6e510254b4b\"\n    exact_text: false\n    approved_language: null\n    evidence: >\n      Owner-confirmed approved example in interview. Grounds commercial\n      integrations in specific privacy-preserving safeguards (aggregation,\n      anonymized proxies) rather than absolute legal promises.\n\n  - claim: >\n      Firefox minimizes default data collection, keeping browsing history\n      stored locally on your device rather than centralizing it for\n      commercial use.\n    tier: default\n    proof_status: approved\n    owner: \"[gap]\"\n    validity_window:\n      valid_from: 2026-09-14\n      valid_until: null\n    source_hash: \"853b536dfe92cfb4b667db77a104a5b23adcad0a6a8dd201ab60b6e510254b4b\"\n    exact_text: false\n    approved_language: null\n    evidence: >\n      Owner-confirmed approved framing in interview. Focuses on default data\n      collection policies rather than absolute legal promises, consistent with\n      Mozilla's public privacy disclosures.\n\n  - claim: >\n      The Firefox terms of use grant Mozilla a nonexclusive, royalty-free,\n      worldwide license only to do as the user requests with content input in\n      Firefox, and give Mozilla no ownership of that content.\n    tier: core\n    proof_status: \"requires_caveat\"\n    owner: Legal\n    validity_window:\n      valid_from: 2026-09-14\n      valid_until: null\n    source_hash: \"853b536dfe92cfb4b667db77a104a5b23adcad0a6a8dd201ab60b6e510254b4b\"\n    exact_text: true\n    approved_language: >\n      a nonexclusive, royalty-free, worldwide license for the purpose of doing\n      as you request with the content you input in Firefox. This does not give\n      Mozilla any ownership in that content.\n    evidence: >\n      Sourced verbatim from blog.mozilla.org (update on terms of use, retrieved\n      2026-09-14). Legal claim; must be reproduced exactly as approved_language\n      above when cited.\n\n  - claim: >\n      Enhanced Tracking Protection blocks cross-site tracking by default\n      because continuous, unconsented commercial surveillance violates\n      fundamental user autonomy.\n    tier: default\n    proof_status: \"requires_caveat\"\n    owner: \"[gap]\"\n    validity_window:\n      valid_from: 2026-09-14\n      valid_until: null\n    source_hash: \"[gap]\"\n    exact_text: false\n    approved_language: null\n    evidence: >\n      Owner-confirmed framing in interview. This is the approved rights-based\n      framing for product features: center default rights, focus on restraining\n      exploitation, name the structural threat. Source document for ETP\n      mechanics is Mozilla technical documentation (not directly retrieved).\n```\n\n---\n\n## Requires caveat\n\n```yaml\nrequires_caveat:\n\n  - claim: >\n      Firefox rolled out Total Cookie Protection by default to all Firefox\n      users worldwide, making Firefox the most private and secure major browser\n      available across Windows, Mac, Linux and Android.\n    tier: default\n    proof_status: requires_caveat\n    owner: \"[gap]\"\n    validity_window:\n      valid_from: 2026-09-14\n      valid_until: null\n    source_hash: \"26b762e05a490b12d060018fa9ab0158dd69d5d7b549208aee34480020f93141\"\n    exact_text: false\n    approved_language: null\n    caveat: >\n      \"Most private and secure major browser\" is Mozilla's own self-assessment\n      (blog.mozilla.org, retrieved 2026-09-14), not an independently verified\n      superlative. Agents must not reproduce this as a verified third-party\n      finding. When using this claim, attribute it explicitly to Mozilla's\n      characterization or scope it to Total Cookie Protection's specific\n      protections rather than treating it as an unqualified absolute.\n    evidence: >\n      Source: blog.mozilla.org Total Cookie Protection rollout post (retrieved\n      2026-09-14). Owner confirmed Total Cookie Protection default rollout as\n      an approved fact; however, the \"most private and secure\" superlative\n      is Mozilla self-assessment and carries independent-source confidence\n      of 0.6 only.\n\n  - claim: >\n      Mozilla does not sell data about you in the way that most people think\n      about selling data, and does not buy data about you.\n    tier: default\n    proof_status: requires_caveat\n    owner: \"[gap]\"\n    validity_window:\n      valid_from: 2026-09-14\n      valid_until: null\n    source_hash: \"853b536dfe92cfb4b667db77a104a5b23adcad0a6a8dd201ab60b6e510254b4b\"\n    exact_text: false\n    approved_language: null\n    caveat: >\n      This claim requires the qualifier \"in the way that most people think about\n      selling data.\" Mozilla's public blog explicitly explains it changed its\n      language because some jurisdictions define \"sell\" more broadly than most\n      people understand. Do not use a standalone, unqualified \"we never sell\n      your data\" claim. Always pair with the approved framing that distinguishes\n      traditional data brokerage from privacy-preserving product monetization,\n      and note that commercial partnerships (search engine agreements, sponsored\n      new-tab features) exist.\n    evidence: >\n      Source: blog.mozilla.org update on terms of use (retrieved 2026-09-14).\n      Owner confirmed in interview that the blanket standalone claim is retired;\n      caveated practice-based descriptions are approved.\n\n  - claim: >\n      Firefox uses privacy-preserving architectures — such as data aggregation\n      and anonymized proxies — to run optional sponsored features without\n      exposing individual identities.\n    tier: default\n    proof_status: requires_caveat\n    owner: \"[gap]\"\n    validity_window:\n      valid_from: 2026-09-14\n      valid_until: null\n    source_hash: \"[gap]\"\n    exact_text: false\n    approved_language: null\n    caveat: >\n      This claim describes technical architecture Mozilla has publicly\n      referenced. Before use in advertising or regulated contexts, confirm\n      current implementation details against Mozilla's technical documentation\n      and privacy notices. Do not extend this claim to assert zero data\n      transmission to commercial partners.\n    evidence: >\n      Owner-confirmed framing in interview. Specific technical documentation\n      (Oblivious HTTP, aggregation methodology) not independently retrieved\n      in this package; source_hash is [gap] pending primary source retrieval.\n```\n\n---\n\n## Forbidden\n\n```yaml\nforbidden:\n\n  - claim: \"Firefox blocks all tracking.\"\n    tier: core\n    proof_status: forbidden\n    owner: Legal\n    validity_window:\n      valid_from: 2026-09-14\n      valid_until: null\n    source_hash: \"[gap]\"\n    exact_text: false\n    approved_language: null\n    reason: >\n      Owner explicitly prohibited in interview. Mozilla's own technical\n      documentation states Enhanced Tracking Protection blocks known\n      third-party trackers using curated lists and heuristics — not all\n      tracking. ETP does not prevent first-party data collection. Claiming\n      total protection contradicts Mozilla's legal disclosures.\n\n  - claim: \"Firefox makes you completely anonymous.\"\n    tier: core\n    proof_status: forbidden\n    owner: Legal\n    validity_window:\n      valid_from: 2026-09-14\n      valid_until: null\n    source_hash: \"[gap]\"\n    exact_text: false\n    approved_language: null\n    reason: >\n      Owner explicitly prohibited in interview. Firefox is not an anonymity\n      network. Standard mode deliberately balances tracking protections against\n      site compatibility. Claiming complete anonymity directly contradicts\n      Mozilla's technical documentation.\n\n  - claim: \"Cross-site profiling is impossible in Firefox.\"\n    tier: core\n    proof_status: forbidden\n    owner: Legal\n    validity_window:\n      valid_from: 2026-09-14\n      valid_until: null\n    source_hash: \"[gap]\"\n    exact_text: false\n    approved_language: null\n    reason: >\n      Owner explicitly prohibited in interview. Firefox's protections reduce\n      cross-site profiling risk; they do not make it technically impossible.\n      This claim overstates the technical guarantee.\n\n  - claim: \"Mozilla never collects data from your browser.\"\n    tier: core\n    proof_status: forbidden\n    owner: Legal\n    validity_window:\n      valid_from: 2026-09-14\n      valid_until: null\n    source_hash: \"[gap]\"\n    exact_text: false\n    approved_language: null\n    reason: >\n      Owner explicitly prohibited in interview. Firefox Privacy Notice\n      explicitly details that Firefox collects technical and interaction\n      telemetry (crash reports, feature usage, performance metrics) by default.\n      This claim directly contradicts Mozilla's legal disclosures.\n\n  - claim: \"Firefox operates with zero telemetry.\"\n    tier: core\n    proof_status: forbidden\n    owner: Legal\n    validity_window:\n      valid_from: 2026-09-14\n      valid_until: null\n    source_hash: \"[gap]\"\n    exact_text: false\n    approved_language: null\n    reason: >\n      Owner explicitly prohibited in interview. Contradicts Mozilla's Firefox\n      Privacy Notice, which discloses default telemetry collection. Users may\n      opt out in settings, but the default state includes telemetry.\n\n  - claim: >\n      Mozilla's non-profit governance exempts it from privacy laws, or\n      Firefox's mission-driven model makes standard privacy regulations\n      inapplicable.\n    tier: core\n    proof_status: forbidden\n    owner: Legal\n    validity_window:\n      valid_from: 2026-09-14\n      valid_until: null\n    source_hash: \"[gap]\"\n    exact_text: false\n    approved_language: null\n    reason: >\n      Owner explicitly prohibited in interview. Firefox is operated by the\n      Mozilla Corporation — a taxable subsidiary owned by the non-profit Mozilla\n      Foundation — and is fully subject to GDPR, CCPA/CPRA, FTC regulations,\n      and international consumer protection laws. Non-profit governance\n      determines corporate incentives, not legal immunity.\n\n  - claim: >\n      Firefox prevents search engines or websites from recording what you\n      do on their platforms.\n    tier: core\n    proof_status: forbidden\n    owner: Legal\n    validity_window:\n      valid_from: 2026-09-14\n      valid_until: null\n    source_hash: \"[gap]\"\n    exact_text: false\n    approved_language: null\n    reason: >\n      Owner explicitly prohibited in interview. Enhanced Tracking Protection\n      restricts cross-site surveillance and third-party tracker networks. It\n      cannot alter the data practices of a first-party site a user directly\n      interacts with, nor does it override the privacy policies of default\n      search providers (such as Google) when a user submits a search query.\n\n  - claim: \"We never sell your data.\"\n    tier: core\n    proof_status: forbidden\n    owner: Legal\n    validity_window:\n      valid_from: 2026-09-14\n      valid_until: null\n    source_hash: \"853b536dfe92cfb4b667db77a104a5b23adcad0a6a8dd201ab60b6e510254b4b\"\n    exact_text: false\n    approved_language: null\n    reason: >\n      Owner confirmed in interview and Mozilla's public blog confirms: Mozilla\n      stepped away from this blanket standalone claim because the CCPA and other\n      jurisdictions define \"sale of data\" broadly — potentially encompassing\n      disclosing, transferring, or making personal data available for any\n      \"valuable consideration.\" Firefox has commercial partnerships (search\n      engine agreements, sponsored new-tab features) that could intersect with\n      broad statutory definitions. The standalone claim is legally unsafe.\n      Use approved caveated alternatives in the approved_at_launch section.\n```\n\n---\n\n## Agent framing rules (non-claim, operational guidance)\n\nThese rules govern how agents use approved claims. They are not claims themselves.\n\n1. **Rights over features.** Frame every feature as the non-negotiable architectural enforcement of a fundamental right, never as a convenient user perk. Describe what the product prevents others from taking, not what the product gives the user.\n\n2. **Structural controls, never unconditional guarantees.** The guiding boundary confirmed by the owner: describe structural controls against cross-site surveillance, never unconditional guarantees against all data collection.\n\n3. **Governance before specs.** The real differentiator is governance (non-profit foundation, independent engine, no shareholder profit motive), not benchmark performance. Do not lead with speed claims.\n\n4. **No absolute protection or anonymity language.** Any claim that implies total, complete, impossible, zero, or never in the context of tracking, anonymity, or data collection is forbidden unless that exact word is present in an approved_at_launch entry with `exact_text: true`.\n\n5. **Attribute superlatives to Mozilla.** \"Most private and secure major browser\" is Mozilla's self-characterization. When used, attribute it to Mozilla explicitly; do not present it as independently verified.\n\n## Evidence record\n\nThe following attributable source language is preserved because it materially constrains this profile.\n\n### Owner-confirmed evidence\n\n> Caveated: rights-based and governance framing is approved, but absolute protection claims ('blocks all tracking', 'zero telemetry', 'complete anonymity'), regulatory immunity claims, and first-party/partner scope claims are forbidden because they contradict Mozilla's own legal disclosures and technical documentation.\n\nSource: Public source\n\n### Counterevidence\n\n> The reason we’ve stepped away from making blanket claims that “We never sell your data” is because, in some places, the LEGAL definition of “sale of data” is broad and evolving.\n\nSource: blog.mozilla.org — https://blog.mozilla.org/en/firefox/update-on-terms-of-use/\n\n### Owner-confirmed evidence\n\n> Mozilla's own technical documentation and privacy notices confirm that Enhanced Tracking Protection blocks known third-party trackers using curated lists and heuristics, not all tracking; Firefox Privacy Notice explicitly details telemetry collection by default; Mozilla Corporation is subject to GDPR, CCPA/CPRA, and FTC regulations; ETP cannot alter first-party site data practices or override default search provider policies.\n\nSource: Public source\n\n### Qualification\n\n> the California Consumer Privacy Act (CCPA) defines “sale” as the “selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer’s personal information by [a] business to another business or a third party” in exchange for “monetary” or “other valuable consideration.”\n\nSource: blog.mozilla.org — https://blog.mozilla.org/en/firefox/update-on-terms-of-use/\n\n### Owner-confirmed evidence\n\n> Firefox rolled out Total Cookie Protection by default to all Firefox users worldwide, which Mozilla describes as making Firefox the most private and secure major browser across Windows, Mac, Linux and Android.\n\nSource: Public source\n\n### Qualification\n\n> Mozilla doesn’t sell data about you (in the way that most people think about “selling data”), and we don’t buy data about you. We changed our language because some jurisdictions define “sell” more broadly than most people would usually understand that word.\n\nSource: blog.mozilla.org — https://blog.mozilla.org/en/firefox/update-on-terms-of-use/\n",
      "signature": "Ix/zPA9gpCmQmtuXzliqJXJoN4SMSp7p4OF5trvR1xqO7VRrDLJd7qXAaPvJ2GFJFSozs7nkWhZ3TYphFUVwBA==",
      "sha256": "4c460e61d1967359945b9c010a10367de3ccfde959d08ba4329e4e95a7cc0c08",
      "kid": "v1",
      "content_type": "text/markdown; charset=utf-8",
      "html_url": "https://registry.encodedbrands.ai/brands/firefox-8df36a3b/files/claims",
      "json_url": "https://registry.encodedbrands.ai/brands/firefox-8df36a3b/files/claims/data.json",
      "source_url": "https://registry.encodedbrands.ai/brands/firefox-8df36a3b/source/claims.md",
      "canonical_source_url": "https://registry.brandcontextprotocol.dev/firefox-8df36a3b/.well-known/brand/claims.md"
    }
  ]
}
