Mozilla has unveiled a pivotal new requirement aimed at enhancing transparency regarding Firefox extensions. Starting November 3rd, 2025, all newly submitted browser add-ons must elucidate their data collection practices to users prior to installation.
Developers will be obligated to declare whether their extensions collect or transmit personal data as part of a new standardized framework incorporated within the extension’s core configuration files.
This initiative mandates the inclusion of data collection permissions in the manifest.json file via the browser_specific_settings.gecko.data_collection_permissions key.
This systematic approach allows Mozilla to amass consistent metadata on extension behavior throughout its expansive add-on ecosystem.
Extensions that neither collect nor transmit user data must explicitly denote this by establishing a “none required” data collection permission, thereby ensuring that privacy-conscious tools gain proper recognition.
Data Collection Policies for Extensions
It is essential for developers to understand that this stipulation specifically pertains to new extensions submitted after November 3rd, 2025. Updates to existing extensions will not be subjected to this mandate during the initial implementation phase, permitting developers to integrate the new framework into their ongoing projects.
However, if an extension begins employing the data_collection_permissions keys in a new version, it must persist in utilizing them for all subsequent releases.
Extensions failing to adhere to these requirements will be barred from submission addons.mozilla.org for signing, accompanied by informative messages designed to aid developers in achieving compliance.
The disclosed data collection information will be prominently featured across various Mozilla platforms, affording users a granular understanding of extension behaviors.
Data collection details will accompany traditional permission prompts upon extension installation, fostering a cohesive authorization experience.
This information will also manifest on the addons.mozilla.org extension listing page and within the Permissions and Data section of Firefox’s about:addons management interface.
To ensure compatibility with legacy Firefox versions, developers targeting versions prior to 140 on Desktop or 142 on Android must furnish users with alternative in-extension controls for managing data collection and transmission immediately following installation.
This consideration guarantees that the transition does not disenfranchise users operating older versions of Firefox.
Mozilla is employing a phased implementation strategy, commencing with new extensions in November 2025, and anticipates extending this obligation to all legacy extensions in the first half of 2026.
The organization has assured substantial advance notification through its add-ons blog prior to enforcing compliance for existing extensions, providing developers ample preparation time.
Moreover, Mozilla is actively developing new features aimed at facilitating this transition for both extension creators and end users, although concrete details remain forthcoming.
This initiative underscores Mozilla’s broader commitment to fostering transparency in browsing practices and safeguarding user privacy, effectively positioning Firefox as a trailblazer in mandating verifiable disclosure of data collection practices before granting extensions access to system capabilities.
Source link: Cybersecuritynews.com.
