277568 - Link to mozilla.org privacy policy from Bugzilla signup page

Status: RESOLVED FIXED

(bugzilla.mozilla.org :: General, defect, P3)

Description

[Daniel Veditz [:dveditz]]

I get a smattering of bugs filed with the security confidential flag set because
people want to keep their names or email addresses private, or even sensitive
information like passwords (recent example: bug 277541).

We need a privacy policy somewhere (preferably linked in bold from the page
where you commit a bug) that says that all bug information is public. Even bugs
marked confidential according to our security policy will eventually be made public.

Comment 1

[Dave Miller [:justdave]]

Since sometime in the last 6 or 8 months, we've had the following privacy notice on the "create an account" page before you sign up for an account:

----8<----
 PRIVACY NOTICE: Bugzilla is an open bug system.  All activity on any
 bug you file will be visible to the public, including the email addresses of
 those involved.  Although steps are taken to hide addresses from email
 harvesters, the spammers are continually getting better technology and
 it is almost guaranteed that the address you use with Bugzilla will get
 spam.  We recommend using a free web email service (such as Yahoo or
 Hotmail or similar) and not your primary email address if this concerns
 you.  There are solutions being worked on to allow you to hide your email
 address from other users, but that option is not yet available.
----8<----

That said, we could probably still use a real privacy notice that we could link to from the footer or somesuch.

Comment 2

[Rafael Ebron (:rebron)]

Here's the overall Mozilla privacy policy that you we should link to:
http://www.mozilla.org/privacy-policy.html

Bugzilla is covered here.

Comment 3

[Gervase Markham [:gerv]]

Sounds good. Let's link to that in addition to the Bugzilla-specific info we have now.

Gerv

Comment 4

[Gervase Markham [:gerv]]

This is a bmo customisation, so Dave or Myk would need to do it.

Gerv

Comment 5

[Gervase Markham [:gerv]]

*** Bug 275628 has been marked as a duplicate of this bug. ***

Comment 6

[Reed Loden [:reed]]

I'll add this.

Comment 7

[Reed Loden [:reed]]

Done.

Link added to index.cgi and createaccount.cgi for the Bugzilla upgrade.
https://landfill.bugzilla.org/prodpatches/
https://landfill.bugzilla.org/prodpatches/createaccount.cgi

Comment 8

[Gervase Markham [:gerv]]

https://landfill.bugzilla.org/prodpatches/createaccount.cgi now looks rather scary. Can we consolidate or reduce the information in some way?

Gerv

Comment 9

[Reed Loden [:reed]]

(In reply to comment #8)
> https://landfill.bugzilla.org/prodpatches/createaccount.cgi now looks rather
> scary. Can we consolidate or reduce the information in some way?

Blame timeless. What would you like to see? It wasn't much better in the current bmo version at https://bugzilla.mozilla.org/createaccount.cgi. :(

Comment 10

[Gervase Markham [:gerv]]

Here's my suggestion, then:

To start creating a Bugzilla account, enter your email address:

[                 ] Sign Up (<a href="">privacy policy</a>)

Note: Bugzilla is a public site. All data you submit may be visible to the public, including your email address. While we do our best to prevent it, this may mean you get spam. If this concerns you, sign up using a disposable email address from a webmail provider.
  

And on the page resulting from clicking "Sign Up":

You will shortly receive an email at <address>. You will not be able to log in until you act on the instructions contained in it. If it doesn't arrive within two hours, contact the administrator, <admin>. Note: the administrator will ignore support email relating to Mozilla products.

Gerv

Comment 11

[Majken Connor [:Kensie]]

Gerv - some of us have been working on strings (specific to b.m.o) here http://docs.google.com/Doc?id=dhmd4jxt_7gf3tpz

I would have the Please Note: section at the top with some room between it and the next section.  I'd like to make links to support forums very obvious in the initial sign up process to help minimize the people that come to bugzilla for support.  I'd also like to include in it a link to a page that explains how to know if you're experiencing a reportable bug or whether you should seek support.

Comment 12

[Gervase Markham [:gerv]]

(In reply to comment #11)
> Gerv - some of us have been working on strings (specific to b.m.o) here
> http://docs.google.com/Doc?id=dhmd4jxt_7gf3tpz

Er, OK... perhaps you'd like to incorporate what you like from my draft into yours? I don't quite understand how you've formatted that page - it's rather confusing. And I (gerv.markham) don't have edit access anyway.

> I would have the Please Note: section at the top with some room between it and
> the next section.  I'd like to make links to support forums very obvious in 
> the
> initial sign up process to help minimize the people that come to bugzilla for
> support.  

But they are already very obvious on the front page, from where people are going to be coming if they are trying to sign up for an account.

> I'd also like to include in it a link to a page that explains how to
> know if you're experiencing a reportable bug or whether you should seek
> support.

Again, isn't the front page, which attempts (via the yellow box outlined in red) to send people arriving at Bugzilla to the right place, the best location for this information?

Gerv

Comment 13

[Majken Connor [:Kensie]]

that's it's intent, but it really isn't very effective.  I have issues myself finding info on that page and I see it several times.  As well, anyone can end up on the main page.  I personally think the best place to really get in users' face about it is when they're signing up. Then they only see it once, but we can be fairly certain they'll see it, and we can also take more room to talk about it rather than clutter up the main page.

For the formatting instead of having two columns and two rows, I have 1 column and 4 rows.  Two of the rows go above the signup field, and then the rows about the privacy notice go below.  So, something like this:

--------<--top of page
Please note support info ect.
:
:
:
Instructions to sign up, what happens next etc.

[                 ] [Sign up]

Privacy notice about spam

---------------

I think we're saying the same things, I'm just saying more in some places.  Although I think I do like the idea of moving the part about the support admins to the page you get after you've clicked.

Comment 14

[Gervase Markham [:gerv]]

Fair enough. You're clearly on top of this; I've you've considered my suggestions, I'm happy :-)

Gerv

Comment 15

[Majken Connor [:Kensie]]

As long as you agree that what I had already said already covers what you want to say, if not please let me know and I can tweak something :)