1000504 - Add Optimizely opt-out on Mozilla Websites privacy statement

Status: RESOLVED FIXED

(www.mozilla.org :: Pages & Content, defect)

Description

[Chris More [:cmore]]

We use Optimizely on various Mozilla websites to help test and improve our website experiences. Through anonymous data collected with Google Analytics, we develop tests to help fix problems or improve user experiences. Instead of just blindly updating websites, we test critical parts of the website using a 3rd party tool called Optimizely. Optimizely previously went through a security/privacy/legal review with bug 840799. It is also implemented on www.mozilla.org and we regularly test pages using the tool.

This tool is mentioned on our websites privacy statement, but there is no information on an opt-out.

https://www.mozilla.org/en-US/privacy/websites/

What do you think about adding an opt-out statement?

We could change the heading from:

You can control individual cookie preferences, indicate your cookie preferences to others, select text only emails, and opt-out of Google Analytics. 

to:

You can control individual cookie preferences, indicate your cookie preferences to others, select text only emails, and opt-out of web analytics and optimization tools.

and then add a statement on Optimizely:

Optimizely: If you do not want data about your website Mozilla experiences to be collected by Optimizely, you can visit Optimizely's opt-out website [1] or visit the www.mozilla.org opt-out link [2].

[1]: https://www.optimizely.com/opt_out

[2]: https://www.mozilla.org/?optimizely_opt_out=true

Comment 1

[Chris More [:cmore]]

Stacy: comments here?

Comment 2

[Mika]

Cmore - this is a very good idea, thank you.  I'll include this for our next round of edits to the privacy notice.  We're doing updates every 3 months (makes it easier for translations also).  

Kohei - question, if I make the update on the master branch in github/legal, do I need to file a separate bug so you can push the changes to production?

Thanks,
Mika

Comment 3

[Kohei Yoshino [:kohei]]

(In reply to Mika from comment #2)
> Kohei - question, if I make the update on the master branch in github/legal,
> do I need to file a separate bug so you can push the changes to production?

Yes, a manual update is needed at www.mozilla.org side to pick up changes in legal-docs. We could probably automate this, but manual updates might be better to avoid unintended pushes, I guess?

Comment 4

[Mika]

(In reply to Kohei Yoshino [:kohei] from comment #3)
> (In reply to Mika from comment #2)
> > Kohei - question, if I make the update on the master branch in github/legal,
> > do I need to file a separate bug so you can push the changes to production?
> 
> Yes, a manual update is needed at www.mozilla.org side to pick up changes in
> legal-docs. We could probably automate this, but manual updates might be
> better to avoid unintended pushes, I guess?

Okay, I'll do that and file a bug for the request.  Because we have to translate any changes made to the English language version, my proposal is to update the notice periodically (and push all changes at the same time to both English and other locales).  

I'll keep this open (assigned to me) and close it when we push the update.
Mika

Comment 5

[Mika]

Hi Kohei - I updated the websites privacy notice today (https://github.com/mozilla/legal-docs/blob/master/websites_privacy_notice/en-US.md)

Can you please:
(1) manually update on mozilla.org side so this page is updated: https://www.mozilla.org/privacy/websites/
(2) Replace the "Websites" title on https://www.mozilla.org/privacy/ so that it says "Mozilla Websites, Communications & Cookies" 

Thanks,
Mika

Comment 6

[Kohei Yoshino [:kohei]]

Attachment: pull request

Comment 7

[[github robot]]

Commits pushed to master at https://github.com/mozilla/bedrock

https://github.com/mozilla/bedrock/commit/098c0ea0493251e3f96017fbae1593b8523ab753
Fix Bug 1000504 - Add Optimizely opt-out on Mozilla Websites privacy statement

https://github.com/mozilla/bedrock/commit/0603fad31ca4b585d4912d8490de85e6fd5ae406
Merge pull request #2245 from kyoshino/bug-1000504-optimizely-privacy

Fix Bug 1000504 - Add Optimizely opt-out on Mozilla Websites privacy statement

Comment 8

[Chris More [:cmore]]

Hi Mika.

I noticed that the copy and link that is up on the websites privacy policy isn't exactly what is mentioned in comment 0. Specifically, the optimizely opt-out link goes to optimizely.com's opt-out page and then a user would have to manually type in www.mozilla.org and then visit the link generated.

Can we change the opt-out copy to something like:

* **Analytics & Optimization**: If you do not want data about your visits to Mozilla websites to be collected by Google Analytics, you can install the [Google Analytics Opt-out Browser Add-on](https://tools.google.com/dlpage/gaoptout). The add-on keeps your visits anonymous and prohibits data transmission to Google Analytics. If you do not want data about your visits to Mozilla websites to be collected by Optimizely, you can [https://www.mozilla.org/?optimizely_opt_out=true](opt-out on www.mozilla.org) or visit [Optimizely's opt-out website](https://www.optimizely.com/opt_out) for more information.

https://raw.githubusercontent.com/mozilla/legal-docs/master/websites_privacy_notice/en-US.md

I added a not and a link about specifically opting-out on www.mozilla.org and they can visit Optimizely.com's website for more information. The link I provided is a one-click link to opt-out on our website.

Comment 9

[Mika]

Hi Chris, thanks for the suggestion, I will update the notice.

Comment 10

[Kohei Yoshino [:kohei]]

This has already been solved.