1951989 - Update cookie banner wording to be more explicit that non-essential cookies are NOT used for tracking and/or analytics in Bugzilla (legal approval required)

Status: RESOLVED FIXED

(bugzilla.mozilla.org :: User Interface, enhancement)

Description

[David Lawrence [:dkl]]

The cookie banner as is potentially misleading on what is not being tracked and may lead to many choosing no by default. We will need Legal will to approve any wording changes.

Comment 1

[David Lawrence [:dkl]]

Attachment: bugzilla_cookie_banner.png

This is the proposed wording change for this bug report. Please review and let me know if it can be worded better. Thanks!

Comment 2

[BMO Github Automation]

Attachment: [mozilla-bteam/bmo] Bug 1951989 - Update cookie banner wording to be more explicit that non-essential cookies are NOT used for tracking and/or analytics in Bugzilla (#2400)

Comment 3

[David Lawrence [:dkl]]

-        In addition to cookies necessary for this site to function, we’d like your permission to set some additional
-        that will improve your experience. Rest assured - we value your privacy. You will be able to change your
+        In addition to cookies necessary for this site to function, we’d like your permission to store some additional information
+        that will improve your experience. [% terms.Bugzilla %] does not use this information for tracking or any kind of analytics.
+        Rest assured - we value your privacy. You will be able to change your

Comment 4

[Nneka]

Hi David,
Thanks for doing this. Is there a list of what cookies you all are using and what the categories are? (e.g. personalization, functional, analytics, etc.). I know we say it's not for tracking or any kind of analytics, but would like to confirm that aligns with the correct cookie categorization since definitions sometimes differ.

Thanks!
Nneka

Comment 5

[David Lawrence [:dkl]]

(In reply to Nneka from comment #4)

Hi David,
Thanks for doing this. Is there a list of what cookies you all are using and what the categories are? (e.g. personalization, functional, analytics, etc.). I know we say it's not for tracking or any kind of analytics, but would like to confirm that aligns with the correct cookie categorization since definitions sometimes differ.

Thanks!
Nneka

Essential Cookies:

Cookies related to authentication and session management:
bugzilla
Bugzilla_login
Bugzilla_logincookie
Bugzilla_login_request_cookie
github_state
github_token
mfa_verification_token

Cookie to track cookie preference:
moz-consent-pref

Miscellaneous:
sudo (for tracking when an admin is logged in as another account)

Non-Essential Cookies:

Cookies to track how a user wants the search results to be displayed such as columns, etc.:
COLUMNLIST
SPLITHEADER
LASTORDER
time-summary-dates

And finally we have a list of key/values that we set in the browsers localStorage data which are mainly for UI related settings. These are for remembering if the user has certain parts of the bug view and new bug form visible or not when they revisit the page. Or for whether they want the dashboard page to auto refresh after a certain time has passed.

That is basically everything we store client side. On the back end we store session information, email preferences, and some other UI settings directly in the DB.

Comment 6

[Nneka]

Thanks! That makes sense to me. In theory the "Cookie Settings" should then link to where they can see these categories of cookies? Those look like Functional cookies to me. What does the view look like when Cookie Settings is clicked?

Also, for the 'you can change your cookie settings later' language I would recommend the below.

You can change your [Cookie Settings] at any time.

Comment 7

[David Lawrence [:dkl]]

Attachment: image.png

Comment 8

[Nneka]

Thank you, that graphic looks fine. Please note that the language may update in the future if we choose to further standardize across properties, but it's good for now! Only thing left is to update to "You can change your [Cookie Settings] at any time."

(I assume it's easy to find those cookie settings)

Comment 9

[David Lawrence [:dkl]]

(In reply to Nneka from comment #8)

Thank you, that graphic looks fine. Please note that the language may update in the future if we choose to further standardize across properties, but it's good for now! Only thing left is to update to "You can change your [Cookie Settings] at any time."

(I assume it's easy to find those cookie settings)

Yes it is. Thanks for the feedback.

Comment 10

[Nneka]

You're welcome, thanks for the confirmation!

Comment 11

[BMO Github Automation]

Authored by https://github.com/dklawren
https://github.com/mozilla-bteam/bmo/commit/c84a5aa89fc0d07428437d59fcf14e96c2434a1a
[master] Bug 1951989 - Update cookie banner wording to be more explicit that non-essential cookies are NOT used for tracking and/or analytics in Bugzilla