Thanks for the link to the privacy policy. You notice, at the bottom, it has links to both “About Mozilla” and “About FakeSpot”?

When you run the Orbit extension, it connects to two domains with every request:

1. orbitbymozilla.com
2. prod.orbit-ml-front-api.fakespot.prod.webservices.mozgcp.net

There’s FakeSpot again.

And FakeSpot has a terrible privacy policy that allows sale of private data directly to advertisers.