The crash reporter for main process crashes for Firefox has an "Email" field which we use to solicit an email address from the user. We use this information in a few ways:
- if the user logs into crash stats with that email address, that triggers the "your_crash" state and we show that user the protected data in their crash report
- if the user asks us to delete crash data on our system that belongs to them, we use the email field as the identifier for which crash reports to remove
- folks have told me they've emailed users with particularly hard-to-reproduce problems, but I wasn't able to find proof of this when I was looking into usage of the Email field so it's unclear to me how compelling this usage is (bug #1626277)
Let's talk about the Email field a bit. There are a bunch of twists. We don't have an Email field in the crash reporter ui for content process crashes. We don't have an Email field in the auto-submit bar which asks users to submit unsubmitted crash reports. We don't have an Email field on about:crashes for crash reports submitted there. I'm pretty sure there's no Email field for any of the Fenix crash reporters.
So in the last week, for the Email field, we have this breakdown:
That's out of 1.3 million crash reports processed in the same time period.
We don't want identifying information we're not using. With email addresses, I claim there should be a very compelling reason to be collecting and storing them.
Given this situation, I think it's time we remove the Email field.
This tracker bug covers that project.