Opera Privacy Statement
Last updated: November 21, 2025
Introduction
This privacy statement describes how we use data in our browsers, websites, and services. Some of the data we use is considered “personal data” under applicable law. However, even when we use personal data, we have no practical way of actually identifying you as an individual. This means that our users are essentially anonymous to us.
The specific categories of data that we collect, use, or otherwise process can vary from product to product, from one purpose to another, and in some cases based on your location. This Privacy Statement gives you detailed information about when, how, and why we process your data (including but not limited to personal data), as well as your rights under applicable law.
Definitions
First, let’s define some key terms. Many of these definitions are adapted from the General Data Protection Regulation (or “GDPR”), the data privacy law which applies in the European Union as well as in Norway. We use the GDPR as a guidepost because it applies directly to us as a European company and because we believe it sets the highest legal standards for our users’ privacy. In some cases we have simplified definitions here in order to make them easier to understand.
Personal data: Any information relating to an identified or identified natural person, as outlined in the GDPR. This includes data such as your IP address, device IDs, advertising IDs. Important: This is just an example of what the GDPR considers personal data. We do not collect all this data at all times. You can check below, under each service to see what data we do collect. There we also explain how we process personal data, and list our specific purposes and legal basis for processing under the GDPR.
Data controller: The person or company that decides whether and how to process personal data. For the purposes of this Privacy Statement, this is Opera Norway AS.
Data processor: Someone who processes personal data on behalf of a data controller.
Legal basis: The specific legal reason that allows us to process personal data. The GDPR sets out six specific grounds for processing personal data. The ones most relevant to our Applications are as follows:
Consent: When we process personal data based on your consent, that means we have asked for your permission to do so and you’ve expressly given it to us.
Contractual grounds: When we process personal data because it is necessary to perform a contract, for example to provide you with a service as described in our Terms of Service or some other agreement.
Legitimate interest: When we process personal data based on legitimate interest, that means we have a legitimate reason to use the personal data (such as ensuring that products work properly, or alerting users about promotions and updates), which is in balance with your right to privacy.
Legal compliance: In some instances it is necessary for us to process personal data in order to fulfill other obligations under the law, for example detecting fraud, making sure you are who you say you are, etc.
Applications: The specific apps we offer, as mentioned below, including our desktop and mobile browsers.
Monetization: Making money. Nearly all of our Applications are free to download and use. Therefore we monetize our products in various ways, primarily by selling advertising within the Applications themselves. The money we make helps us keep the lights on, pay the salaries of our staff, and continue developing the most innovative, independent browsers on the market. We do not sell users’ personal data to anyone, either to monetize or to provide advertising.
Purpose: The specific reason or reasons we have for processing data, including personal data.
Process or processing: Collecting or using personal data. As defined in the GDPR, the word “processing” can mean doing almost anything with personal data. However, it never means selling such data or making it available to anyone in ways that are not covered by the GDPR. Below we have used it in this general sense when we have a general meaning in mind, and used more specific terms (like “store” or “share”) where appropriate.
Retention / retain: The time period for which we will continue to store data. In general, we do not process or store personal data longer than needed and therefore delete it after a certain period of time. Below we have included some more specific details on retention periods, which vary depending on the type of personal data at issue and the purpose for which it is processed.
Transfer: Personal data is “transferred” when it is sent or made available to someone or some other company outside the European Economic Area (or EEA - that is the European Union plus Norway, Iceland, and Liechtenstein).
Opera Group: Our affiliated group of companies, including Opera Norway AS (a Norwegian company) which develops and publishes the Opera browsers, as well as other subsidiaries and affiliated companies around the world. For more information, see below.