1783726 - "Spin-off" of the Mozilla YouTube RegretsReporter extension

Status: RESOLVED WONTFIX

(Data Platform and Tools :: General, task)

Description

[Chico Camargo]

Attachment: Data Review Request Form for this Bug

Comment 1

[Travis Long [:travis_]]

Request for data-review acknowledged. Due to the category of data in this I'm running this by Trust & Legal for a thumbs-up just to be sure we are good to go. Once we get that approval, I will provide the data-review+ as soon as possible. I don't expect any issues but I did want to warn you of the possible delay in my review for this.

If you have any deadlines or timelines for this that you would like to meet, please do let me know and I will do my best to ensure that you are not blocked on this any longer than necessary.

• Travis

Comment 2

[Travis Long [:travis_]]

cc :mfeldman for Trust & Legal signoff on the category 3 and 4 data for an opt in only collection.

Comment 3

[Chico Camargo]

Sounds good, thanks Travis!
We're trying to hit a deadline by this Friday. I hope that's okay.

Comment 4

[Travis Long [:travis_]]

(In reply to Chico Camargo from comment #3)

Sounds good, thanks Travis!
We're trying to hit a deadline by this Friday. I hope that's okay.

Thank you! I will do my absolute best to have this done by then.

Comment 5

[Chico Camargo]

Amazing. Thank you so much!

Comment 6

[AL]

This is Al from Privacy/Legal. I have a few questions here. 1) Is there any way to be able to identify the person who tags the video in the extension? I see you stated "users can anonymously tag videos" in your comment, but I wanted to make sure about the anonymity of people's identity. Can you please confirm? 2) Is it clearly stated to the user, when using the extension, that tagging will not being identified as who did the tagging? 3) If the data is identifiable (meaning we can know who did the tagging on what video), is it clearly stated to the user what we use the data for and whether we share it with 3rd parties 4) By using SurveyMonkey as a survey tool at the end, do you collect any personal data and do you state clearly what are you using the survey for, and whether you share the data with 3rd parties?

Comment 7

[Travis Long [:travis_]]

Adding a ni? for Chico to provide answers to the questions in the comment above (and removing the ni? for Feldman)

Comment 8

[Chico Camargo]

Here you go. Let me know if you need further detail!

1. Is there any way to be able to identify the person who tags the video in the extension? I see you stated "users can anonymously tag videos" in your comment, but I wanted to make sure about the anonymity of people's identity. Can you please confirm?

No. There is no way to identify the person who tags the video in the extension. All we will have is a random ID like "abcd1234", to tell apart one installation of the extension from another. This random ID does not include any personal information. So, for example, if I install the extension on both my laptop and my desktop, one of them will be "abcd1234" and the other will be "abcd5678", and there will be no way to tell that they are actually owned by the same person, or located in the same IP or geographical region.

2. Is it clearly stated to the user, when using the extension, that tagging will not being identified as who did the tagging?

Yes. It is clearly stated to the user that tagging will not being identified as who did the tagging. In fact we use the exact example I mentioned in question 1 above.

3. If the data is identifiable (meaning we can know who did the tagging on what video), is it clearly stated to the user what we use the data for and whether we share it with 3rd parties

The data will not be identifiable. All we will know is that "computer abcd1234 tagged these videos". But nevertheless, we clearly state how the data will be used and who it will be shared with.

4. By using SurveyMonkey as a survey tool at the end, do you collect any personal data and do you state clearly what are you using the survey for, and whether you share the data with 3rd parties?

The SurveyMonkey will also be opt-in, independently from the extension. By that I mean that users will be free to download the extension without participating in the survey.
The survey contains demographic questions, such as race/ethnicity and gender, which will be used to understand the demographics of the people contributing to this project. All of the demographics results will be used in aggregate: we will not look at the race or gender of user "abcd1234", but rather at the overall percentage of each race or gender category in our study. The information shared with third parties will only be at this aggregate level.
Finally, We state all of that clearly so that users are fully informed.

Comment 9

[AL]

Thank you very much for your responses, Chico!

We're good to move forward. No concern or further question from the Privacy/Legal side.

Comment 10

[Travis Long [:travis_]]

Comment on attachment 9288898 [details]
Data Review Request Form for this Bug

Data Review

1. Is there or will there be documentation that describes the schema for the ultimate data set in a public, complete, and accurate way?

Yes, through the metrics.yaml file and the Glean Dictionary.

2. Is there a control mechanism that allows the user to turn the data collection on and off?

Yes, by uninstalling the browser extension, as explained in the instructions page shown after installation.

3. If the request is for permanent data collection, is there someone who will monitor the data over time?

N/A, collection to end 2021-12-31

4. Using the category system of data types on the Mozilla wiki, what collection type of data do the requested measurements fall under?

Category 4

5. Is the data collection request for default-on or default-off?

Default-off, users opt-in by installing the extension

6. Does the instrumentation include the addition of any new identifiers (whether anonymous or otherwise; e.g., username, random IDs, etc. See the appendix for more details)?

Yes

7. Is the data collection covered by the existing Firefox privacy notice?

Yes

8. Does the data collection use a third-party collection tool?

Yes, an optional SurveyMonkey survey

Result

data-review+ (escalation reviewed by Al Lavassani)

Comment 11

[Rob Miller [:rmiller]]

Hello,

The Mozilla Data Engineering organization is currently going through our extensive backlog, consisting of hundreds of issues stretching back for nearly 10 years. We've done a pass through all of the open bugzilla bugs and have identified and tagged the ones that we think are relevant enough to still need attention. The rest, including the bug with which this comment is associated, we are closing as "WONTFIX" in a single bulk operation.

If you feel we have closed this (or any) issue in error, please feel free to take the following actions:

• Reopen the bug.
• Edit the bug to add the string [dataplatform] (including the brackets) to the Whiteboard field. (Note that you must edit the Whiteboard, not the similarly named QA Whiteboard.)

Doing this will ensure that we see the bug in our weekly triage process, where we will decide how to proceed.

Thank you.