Opera Privacy Statement
Last updated: February 14, 2025
Introduction
This privacy statement describes how we use data in our browsers, websites, and services. Some of the data we use is considered “personal data” under applicable law. However, even when we use personal data, we generally have no way of actually identifying you as an individual, and our users are essentially anonymous to us.
The specific categories of data that we collect, use, or otherwise process can vary from product to product, from one purpose to another, and in some cases based on your location. This privacy statement sets out when, how, and why we process your data (including but not limited to personal data), as well as your rights under applicable law.
Definitions
First, let’s define some key terms. Many of these definitions are adapted (with changes) from the General Data Protection Regulation (or “GDPR”), the data privacy law which applies in the European Union as well as in Norway. We use the GDPR as a guidepost because it applies directly to our European companies and because we believe it sets the highest legal standard for user privacy. However, in some cases we have simplified definitions here for the purpose of clarity.
Personal data: “any information relating to an identified or identifiable natural person” as the GDPR says. This includes data such as your IP address, device IDs, advertising IDs, and location. Below where we describe how we process personal data, we also list the specific purpose for doing so, as well as our legal basis under the GDPR (as those terms are defined below).
Data controller: The person or company that decides whether and how to process personal data.
Data processor: Someone who processes personal data on behalf of a data controller.
Legal basis: the specific legal grounds we use for processing personal data. The GDPR sets out six specific grounds for processing personal data. The ones most relevant to our Applications are as follows:
Consent: When we process personal data based on your consent, that means you’ve expressly given us permission to do so.
Contractual grounds: When we process personal data because it is necessary to perform a contract, for example to provide you with a service as described in our Terms of Service or some other agreement.
Legitimate interest: When we process personal data based on legitimate interest, that means we have some use for the personal data (such as monetization, or ensuring that products work properly) which is in balance with your right to privacy.
Legal compliance: In some instances it is necessary for us to process personal data in order to fulfill other obligations under the law, for example detecting fraud, making sure you are who you say you are, etc.
Applications: the specific apps we offer, as mentioned below, including our desktop and mobile browsers.
Monetization: making money. Nearly all of our Applications are free to download and use. Therefore we monetize our products in various ways, mostly by selling advertising within the Applications themselves. The money we make helps us keep the lights on, pay the salaries of our staff, and continue developing the most innovative, independent browsers on the market. However, when we monetize our Applications, we never sell our users’ personal data to anyone.
Purpose: the specific reason or reasons we have for processing personal data.
Process or processing: collecting or using personal data. As defined in the GDPR, the word “processing” can mean doing almost anything with personal data. Below we have used it in this general sense when we have a general meaning in mind, and used more specific terms (like “store” or “share”) where appropriate.
Retention / retain: the time period for which we will continue to store data. In general, we do not process or store personal data longer than needed and therefore delete it after a certain period of time. Below we have included some more specific details on retention periods, which vary depending on the type of personal data at issue and the purpose for which it is processed.
Transfer: Personal data is “transferred” when it is sent or made permanently available to someone or some company outside the European Economic Area (or EEA - that is the European Union plus Norway, Iceland, and Liechtenstein).
Opera Group: Our affiliated group of companies, including Opera Norway AS (a Norwegian company) which develops and publishes the Opera browsers, as well as other subsidiaries and affiliated companies around the world. For more information, see below.