Earlier quoted context omitted.
What part of "we have x million monthly users" is "a consumer’s personal information"? That's information about how many consumers you have, but it's not personal
But, "we have x million monthly users _in Arizona_" would be using your personal data, from a legal standpoint. And if they provide that aggregate data in exchange for money, they are selling your personal data (but not in the way many people think of it, like in a Google/FB sense of building an individualized profile and selling ads against that). Mozilla might be doing very sketchy things with your data, but it's a…
Per: https://thecpra.org/#1798.145(a)(6)
> Exemptions: > (6) Collect, use, retain, sell, share, or disclose consumers’ personal information that is deidentified or aggregate consumer information.
I understand that people who have a vested interest in eroding any possibility of online privacy and data protection would want us to believe these laws are vague and overreaching - but that doesn’t mean they actually are vague and overreaching.