Privacy Policy

Last updated: September 7, 2026.

  • This policy covers Floorp for Desktop, Floorp for iOS, floorp.app, and the Floorp Blog.
  • Browser data is stored on your device. Optional Mozilla Sync also stores synchronized records on Mozilla's servers with end-to-end encryption. On iOS, available Sync categories are enabled by default after sign-in.
  • Floorp for iOS disables its telemetry and crash-report uploads. Desktop disables Mozilla telemetry by default. Features such as updates, search, and Sync still make network requests.
  • The website and blog use Google AdSense. Google and advertising partners may use cookies and information about site visits to serve and measure ads, including personalized ads according to your choices.

The sections below explain the data involved, service providers, and your choices for each product.

1. Scope and who we are

Floorp Projects is operated by Ryosuke Asano as a sole proprietorship. Ryosuke Asano is responsible for the handling of information by Floorp Projects described in this policy.

Floorp Projects develops Floorp and operates the official website at floorp.app and the Floorp Blog at blog.floorp.app. This policy explains how information is handled when you use these products and sites. Features vary by operating system, version, region, and settings; a feature-specific disclosure applies when you use that feature.

Personal information includes information that identifies you directly, such as a name or email address, and information that can reasonably be linked to you, such as an account identifier or certain connection data. Data stored only on your device, encrypted Sync records, and information processed by an online service are explained separately below.

2. Floorp for Desktop

Browser data and customization: History, bookmarks, passwords, autofill information, cookies, settings, workspaces, web-panel settings, and data saved by available Floorp features (for example, notes and clips) are stored in your browser profile as you use the relevant features. Split view and workspaces organize your browsing locally. Supported records may also be synchronized when you use Mozilla Sync, as explained below. Websites opened in tabs or web panels receive ordinary browser requests and any information you choose to submit.

Telemetry and feature requests: The default Desktop configuration disables Mozilla telemetry and health-report uploads. This does not stop the communications needed for enabled features: Floorp may request browser updates, feature configuration, security and compatibility information, or extension updates from Floorp, Mozilla, and the relevant distribution provider. These providers receive connection information such as your IP address, request time, browser or operating-system information, and the resource requested. Update requests can identify a platform, architecture, and release channel. Downloads may be delivered by GitHub or the package distributor you choose.

Shortcut and web-panel icons: When an icon is unavailable for a new-tab shortcut or web panel, Floorp may request one from Google's favicon service. New-tab requests use the site's domain name. The current web-panel implementation uses the configured URL, so the request can include its path and query. Google receives this information and ordinary connection information, including your IP address. Icon requests can occur when the shortcut or panel button is displayed, before you open the page. Opening a shortcut, sponsored link, web panel, or other external content also sends a request to its provider.

Optional Mozilla services: If you choose to use a Mozilla-provided service, including the built-in Firefox VPN where available, the service may require a Mozilla Account and acceptance of its terms. That service's notice explains its data processing. The iOS App Store data list below is specific to iOS and is not a list of everything Desktop sends.

3. Mozilla Account and Sync

Signing in to a Mozilla Account and using Sync are optional. Mozilla provides the account and Sync services. Sync handles supported browser data and data from Sync-enabled features. Depending on the platform, version, and settings, browser data can include bookmarks, browsing history, open tabs, saved website usernames and passwords, payment methods, region-eligible addresses, and supported settings.

Content and associated information saved through Floorp features may also be synchronized in supported versions, according to each feature's Sync settings. Examples include notes in Floorp Notes and, where available, saved clips in Floorp Clips. Depending on the feature, this can include saved text, URLs, image previews, file information such as names and paths, and timestamps. The data synchronized and default settings vary by feature.

Sync record content is encrypted end to end on your device before transmission. Only a Sync client with the encryption keys can decrypt it; Mozilla and Floorp Projects cannot decrypt that content on Mozilla's servers. Floorp Projects does not operate the Mozilla Account or Sync servers and does not receive plaintext Sync record content from them.

Account email addresses, optional display names and profile images, authentication information, account and device identifiers, settings, IP-derived country/city/region, service interactions, and technical or diagnostic data are separate from the encrypted Sync content. Mozilla processes this information to provide and secure accounts and connected services, diagnose problems, and improve those services. Its contracted providers may assist with these purposes, including handling service errors. The Mozilla Accounts Privacy Notice describes the processing and available controls.

4. Floorp for iOS

Local data and Sync defaults: Browsing data, Floorp Notes, and web-panel settings are stored on the device as you use these features. After signing in, bookmarks, history, tabs, passwords, payment methods, addresses where supported, and Floorp Notes are enabled for Sync by default in the current iOS configuration. Review the Sync settings after sign-in; each available category can be controlled separately.

Floorp telemetry and crash reporting: The current Floorp for iOS configuration disables Floorp's upload paths for Glean telemetry, MetricKit diagnostics, Sentry crash reporting, sponsored-content reporting, and advertising attribution. The Product Interaction and diagnostic disclosures below describe the optional Mozilla Account and connected services, rather than these disabled upload paths. If a future release enables a Floorp upload path, we will update the disclosure and any required consent controls before enabling it.

Other feature requests: Enabled search, content, and security features may contact their providers, including Mozilla Remote Settings for configuration or protection-list downloads and Mozilla content services for suggestions or homepage content. Providers receive the request and ordinary connection information. Home-article requests can include language, region, and browser information. Displaying article cards can also request images or icons from the addresses supplied by the content service, or look up the article site's icon, before you open an article. You can manage homepage content in settings. The current iOS release configuration disables Mozilla's hosted summarizer, Quick Answers backend, and remote push-notification service.

Optional Firefox Relay: If your Mozilla Account already uses Firefox Relay and email-mask suggestions are enabled, the integration contacts Mozilla's Relay service to retrieve or create masks. Creating a mask can send the website's domain along with account authorization information; Relay stores masks and the sites where they are used. You can turn off mask suggestions in Floorp's settings. Mozilla's Subscription Services Privacy Notice explains Relay's processing, retention, and your choices.

App Store data disclosures: We conservatively disclose the following 17 data types according to Apple's App Store privacy definitions. They cover processing associated with the optional Mozilla Account and Sync services provided by Mozilla, as well as features such as search suggestions described below. Search-suggestion requests can occur without signing in to a Mozilla Account.

In Apple's terminology, collection concerns data transmitted off-device and accessible for longer than a real-time request. We conservatively disclose encrypted Sync records because they remain stored off-device and associated with an account. Each listed type is treated as linked to your identity.

What this list means: This disclosure does not mean Floorp Projects independently collects or can view all 17 data types. It includes processing by Mozilla-provided services; as explained above, Sync content is end-to-end encrypted, and Floorp Projects does not receive it in plain text.

  1. Name — App Functionality. An optional Mozilla Account display name and names in synchronized address or payment-method records.
  2. Email Address — App Functionality. Your Mozilla Account email address and email values in synchronized address records.
  3. Phone Number — App Functionality. Phone values in optional synchronized address records.
  4. Physical Address — App Functionality. Street, locality, region, postal code, and country values in optional synchronized address records.
  5. Payment Info — App Functionality. Optional synchronized credit- or debit-card autofill records.
  6. Coarse Location — App Functionality and Analytics. Mozilla Account services may infer country, city, or region from your connection IP for service operation, security, and improvement.
  7. Photos or Videos — App Functionality. An optional Mozilla Account profile image managed through the account settings web flow.
  8. Other User Content — App Functionality. Mozilla Account authentication data, Floorp notes, saved website usernames and passwords, and bookmark metadata. Apple does not provide a password-specific data type.
  9. Browsing History — App Functionality. Optional synchronized browsing history, bookmark URLs, and open-tab URLs.
  10. Search History — App Functionality. Searches represented in browsing-history records that may be synchronized, together with conservative coverage of search-suggestion requests.
  11. User ID — App Functionality and Analytics. A Mozilla Account identifier used for authentication and Sync.
  12. Device ID — App Functionality and Analytics. Account-bound device and Sync-client identifiers used to connect and identify your devices.
  13. Product Interaction — App Functionality and Analytics. Mozilla Account service interactions, such as connected-service use, settings interactions, and last-Sync activity.
  14. Crash Data — App Functionality and Analytics. If a Mozilla Account connected service experiences an unexpected issue, technical and interaction data relating to that issue may be sent to Mozilla's contracted error service.
  15. Performance Data — App Functionality and Analytics. Mozilla Account and Sync timestamps, submission success or failure, and service-performance data.
  16. Other Diagnostic Data — App Functionality and Analytics. Mozilla Account and Sync error messages, device information, and service state used to diagnose operational issues.
  17. Other Data Types — App Functionality and Analytics. Account age eligibility, authorization data, language preference, account settings, and technical service data not represented by another App Store data type.

Content and contact categories support the account, browsing, autofill, and Sync features you use. Coarse Location, identifiers, Product Interaction, diagnostic categories, and Other Data Types may also be used for account-service security, operation, analytics, and improvement. None of the 17 declared data types is used by Floorp, or on Floorp's behalf, to track you across apps or websites owned by other companies. This iOS build does not upload advertising-attribution data. Advertising on the website and blog is described in its own section.

5. Search, websites, extensions, and permissions

Searches are sent to the selected search provider. If search suggestions are enabled, text you type can be sent before you submit a search. The iOS suggestion client uses an ephemeral request session, and Floorp Projects does not independently retain that suggestion request off-device. Providers may process or retain requests under their own notices. Searches can also appear in local history and be included in Sync when history synchronization is enabled.

Websites and services opened in tabs, web panels, or an external-service feature receive ordinary browser traffic. This can include an IP address, browser information, cookies, and information you submit, such as a search, message, uploaded file, or page content you choose to share with an AI service. Their privacy notices and account settings govern their processing.

Extensions can access pages or browser data within the permissions you grant them; Desktop extension stores also receive installation or update requests. You can manage extensions and permissions in Floorp. Access to a camera, microphone, location, photos, or files depends on the feature and the permissions or system picker choices you make. You can change available permissions in Floorp or your operating-system settings.

6. Official website and blog

When you visit floorp.app or blog.floorp.app, Floorp and its hosting or delivery providers process requests to deliver pages, images, downloads, and other resources. Request and operational data can include IP addresses, requested URLs, timestamps, browser and operating-system information, language, referrers, response status, and error information. This information is used to deliver the sites, diagnose faults, and protect them against misuse.

The official website and blog use Cloudflare for hosting and delivery. Cloudflare may also process connection and security information as described in its privacy policy.

External links: The website and blog may link to external sites, including downloads, documentation, donation services, community platforms, and video services. Links to YouTube videos are one example. Opening a link connects you to the corresponding provider, which receives ordinary request information and processes it under its own privacy policy. An ordinary link does not itself embed the linked content in our page.

Externally hosted content: Some pages load content from external providers; images hosted on Imgur in blog posts are one example. If externally hosted images, thumbnails, videos, or other content are embedded in a page, loading that content may send request information, such as your IP address, browser information, and referrer information, to the provider before you open an external link or play a video. The timing of requests and use of cookies or similar technologies depend on the content, embedding method, browser settings, and consent choices. Each provider's privacy policy explains its processing.

Language cookie: The official website uses a first-party cookie named NEXT_LOCALE to remember English or Japanese. It is set for up to one year and may be renewed when you visit an explicit language URL or change languages. You can remove it in your browser's site-data settings. The site also reads the browser's language preference to select a language.

Advertising: Both the website and blog display advertising through Google AdSense. The advertising section below applies when these pages are loaded in Floorp or any other browser, including in a web panel.

7. Google AdSense, cookies, and advertising choices

Google and other third-party advertising providers may set or read cookies and similar identifiers when you visit the website or blog. Requests to these providers can include the page URL, IP address, browser or device information, and ad impressions or interactions. Providers use this information for ad delivery, measurement, fraud prevention, and, according to your consent and settings, personalization.

Google and its partners may use advertising cookies to serve personalized ads based on previous visits to this and other websites. Third-party providers or advertising networks may also serve ads and use their own cookies. The consent message's partner list and vendor settings show the advertising providers selected for that site and links to their privacy information.

Both sites use Google's advertising consent and regional privacy controls. Messages are shown according to your region, applicable legal and advertising-service requirements, and saved choices. Where prior consent is required, we request it before the relevant processing begins. Where it is not required, the sites can be used without a prior consent action, subject to the data practices explained in this policy and any applicable opt-out choices.

Where the European regulations message is shown, reopen it using the Privacy and cookie settings link at the bottom of a page displaying ads. Choose Do not consent to withdraw consent, or Manage options to change individual purposes and then confirm your choices. The Partner list or Vendor preferences controls let you review the providers and manage vendor choices. Other regional messages offer the choices shown in that message. This policy itself does not give consent to optional advertising processing.

You can disable Google's personalized advertising in Google Ads Settings. YourAdChoices provides choices for participating third-party advertising providers. Your browser also lets you block or delete cookies and site data. Disabling personalization does not remove all ads or necessarily stop cookies or processing used for measurement, fraud prevention, or other permitted purposes. Deleting cookies or using another browser may require you to set your choices again.

8. Retention and deletion

Local browser data remains in your browser profile until you remove it with the relevant controls or the operating system removes it. Removing local data or uninstalling an app does not necessarily delete a synchronized copy, exported files, or operating-system backups.

Mozilla's current notice generally retains account data while the account is active and technical, settings, and interaction data for up to 25 months. Periods can vary by data type, settings, security needs, backups, and legal obligations. Floorp Projects does not independently operate a server copy of your Mozilla Account or Sync records; Mozilla's notice sets out its retention terms.

We retain site operational records and information you send to our support contact for the period needed to operate and protect the services, handle the request, and meet applicable obligations. Retention depends on the record and purpose; the one-year language-cookie period does not apply to all logs or advertising data. Google, hosting providers, and other external services describe their own retention and deletion practices in their notices.

9. Your controls and privacy requests

  • Use Floorp's settings to clear supported local browser data and manage search suggestions, site permissions, extensions, and privacy protections.
  • Review each available Sync category after sign-in. Mozilla's current documentation says turning off a standard Sync data type deletes that type from Mozilla's servers, while local copies on your devices remain. Controls for individual Floorp features may stop synchronization or change the storage mode without deleting previously synchronized data. For example, the Floorp Notes switch on iOS stops Notes synchronization on that device; it does not delete the server copy. See the account-deletion option below for deleting server-side Sync data.
  • Signing out stops Sync on that device but does not by itself delete the server copy. Deleting your Mozilla Account deletes its server-side Sync data. Use Mozilla Account settings and the linked Sync instructions.
  • Mozilla Account settings also offer data-sharing controls under Data Collection and Use. These account-service choices are separate from Floorp's browser telemetry settings.
  • Use the website or blog consent controls, Google Ads Settings, participating providers' opt-out tools, and your browser's cookie controls to manage advertising choices.
  • For Floorp-controlled information, contact contact@floorp.app to request access, correction, deletion, or other rights available under applicable law. We may need information to verify your identity and locate the relevant records. Mozilla, Google, and other providers handle requests for the data they control through their own privacy-request channels.

Where processing relies on consent, you can withdraw that consent using the relevant controls or by contacting us about Floorp-controlled processing. Withdrawal does not affect the lawfulness of processing that occurred before it. Some requests may be limited by applicable legal obligations or the rights of others.

10. Sharing and protection

Floorp Projects does not sell your personal information. Information can be processed by the providers identified above when you use the corresponding features or sites. Website advertising may involve cross-site advertising processing as explained in the advertising section; the iOS no-tracking declaration applies to the iOS app's declared data.

When we entrust a provider with processing information for us, we require appropriate protection and use within the purposes of that work. Separately operated services, such as Mozilla Accounts and Google's advertising services, describe their responsibilities and safeguards in their own notices. Sync content uses end-to-end encryption; other online requests use the protections of the relevant service.

For third parties that receive personal information through Floorp for iOS's integrated features, we ensure protection that is the same as or greater than the protection described in this policy and required by Apple's App Review Guidelines. We limit what the app shares to the information needed for the features and purposes explained here. When selecting a service or changing an integration, we review the provider's privacy and security information, retention and deletion practices, user choices, and protections for its service providers. We do not use an integration when we cannot establish those protections, and will change or stop the sharing if those protections can no longer be maintained.

This protection requirement applies to integrations selected by Floorp Projects, including account, Sync, built-in search and search-suggestion services, content delivery, and Relay. Websites you choose to visit through ordinary browsing and search services you add yourself handle information under their own privacy notices, as explained in section 5.

Providers may process information outside your country. For example, Mozilla's notice describes processing in the United States and international-transfer safeguards. We may disclose Floorp-controlled information when required by applicable law or necessary to address fraud, security incidents, or protect legal rights.

11. Policy updates

We update this policy when features, service providers, or data practices change, and show the latest revision date above. For material changes, we will explain the main changes and their effective date through the website, blog, or an appropriate in-product notice. Where a change requires consent, we will request it before that processing begins; continued use alone is not a substitute for that consent.

September 7, 2026 clarification: We clarified that the 17 App Store data types include processing by Mozilla-provided services and do not mean Floorp Projects independently collects or can view all of them. This clarification does not add data types, enable telemetry, or introduce new uses of personal information or new third-party disclosures.

September 6, 2026 update: We clarified the scope for Desktop, iOS, the website, and the blog; retained the iOS App Store disclosures; and added explanations of feature requests, website advertising, cookies, user controls, and the privacy contact. Editing this policy does not itself enable telemetry or change your Sync or advertising settings.

12. Contact

For questions about this policy or a request concerning information handled by Floorp Projects, email contact@floorp.app. Tell us which product or site and which information your request concerns. Do not send passwords, Sync recovery keys, or payment-card numbers.