CITT

    Scan results

    Firefox Fast & Private Browser

    Android

    Fast and private web browser with automatic tracker blocking, enhanced tracking protection, password management, and customizable search engines. Privacy-focused browsing with optional private mode and incognito features.

    CITT SCORE
    95
    out of 100
    TRUSTED

    Quick Verdict

    Best for: Everyday browsing with strong built-in protections

    What It Means For You

    Browsing activity stays largely on the device, with strong protections applied by default. Install referral data is shared with Adjust and Google to track how the app was discovered, and crash reports may reach Sentry. Notification delivery uses Firebase, but browsing history is not sent there.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (10)

    Data Security

    2 total
    1 Medium
    1 Low

    Network Security

    1 total
    1 Low

    Code Security

    3 total
    2 Medium
    1 Low

    Privacy

    4 total
    1 High
    3 Medium

    Third-Party Services

    Adjust, Sentry, Firebase (FCM only), Google Play Install Referrer, OkHttp

    Security Strengths

    • ✓AES-256-GCM encryption with Android Keystore for credentials and credit cards
    • ✓Multi-process architecture with 80+ sandboxed processes
    • ✓No WebView vulnerabilities (uses GeckoView)
    • ✓Room ORM prevents SQL injection
    • ✓User-controllable Glean telemetry with opt-out
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    tracking
    analytics
    gdpr
    ccpa
    marketing attribution
    crash reporting

    Package

    org.mozilla.firefox

    Version

    147.0.1

    Analysis Date

    Jan 21, 2026

    Classes Analyzed

    18,478

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Very Secure

    Key Findings

    Data Security - 2 findings (1 medium, 1 low)

    Network Security - 1 finding (1 low)

    Code Safety - 0 findings

    Privacy - 4 findings (1 high, 3 medium)

    Privacy Concerns

    What Data is Collected

    • Install referral data (how the app was discovered) is collected at first launch via Google Play and Adjust.
    • Crash and error reports, which may include device details and session information, can be sent to Sentry.
    • Firebase receives only what is needed to route push notifications to the device. Browsing history is not included.

    Third-Party Data Sharing

    ServicePurposeData Shared
    AdjustInstall attributionReferral source, device identifiers
    Google Play Install ReferrerInstall attributionReferral source data
    SentryCrash reportingCrash logs, device details
    Firebase (FCM)Push notificationsNotification routing data only
    OkHttpHTTP client libraryHandles outbound network connections

    Understanding the Scores

    CategoryScore
    Security100/100
    Privacy90/100
    Data Security100/100
    Network Security100/100
    Code Safety100/100
    Data Collection92/100
    Data Sharing95/100
    User Control92/100

    Positive Security Features

    • Browsing history and activity are not transmitted to analytics or advertising services.
    • Push notifications are routed without exposing browsing data to Firebase.
    • Strong privacy protections are active by default, with no manual configuration required.

    Areas for Improvement

    • Install attribution services receive information about how the app was discovered. Adjusting device ad tracking preferences can reduce this data sharing.
    • Crash reports sent to Sentry may include session details. The app's privacy settings may offer an option to opt out of diagnostic data sharing.
    • A small number of privacy-related data handling practices could be made more transparent, particularly around what is shared with attribution partners at install time.

    About This Analysis

    This scorecard is based on analysis of the app's code, network configuration, and data handling practices.

    App Details

    • App: Firefox Fast & Private Browser
    • Package: org.mozilla.firefox
    • Version: 147.0.1
    • Scan Date: January 21, 2026

    Right of Reply

    Developer not yet contacted