739620 - Figure Out Disclaimer Text For Collecting Email Addresses

Status: VERIFIED FIXED

(Websites :: mozillalabs.com, defect)

Description

[Ben (:bensternthal)]

From data privacy review:

From the data safety meeting (see email 4/19 One Item From Data Safety Meeting)… "They suggested that if you ever plan on using the user's email address for any purpose (even if its in the future) to put a disclaimer on the sign up form."


Poking around it looks like Mozillians and Mozilla Reps just link to the privacy policy.

Comment 1

[Ben (:bensternthal)]

Alina asked that I add Jishnu to approve the text.

Comment 2

[David Ascher (:davida)]

Jishnu -- there is no "sign up form" but the standard Persona ID dialog, which doesn't have a way of telling users what our plans are for their email address.

The Persona dialog _does_ let us link to ToS and PP, as I expect you already know.  Would it make sense to use the ToS feature to explain the circumstances under which we will use the email addresses?

--da

Comment 3

[Jishnu Menon :jishnu]

Hi David and Ben

Could I see the current workflow? Here's how affiliates solved the sign-up/sign-in process:https://affiliates.mozilla.org/en-US/. Could you implement the same workflow?

However, the language for the two checkboxes for you should probably look more like https://donate.mozilla.org/page/s/mozilla-manifesto.

I'm not yet confident in the Persona implementation of TOU/PP because I had changes I'd asked for to clarify what it should look like (right now its a bit confusing). Once those changes get made, I need to do an impact assessment with outside counsel to see if we can get rid of the checkbox.

Thanks
Jishnu

Comment 4

[Ben Adida [:benadida]]

Jishnu: I thought we had implemented exactly what you wanted, no? If not, please get back in touch, it feels like we're circling on this a few too many times.

Comment 5

[David Ascher (:davida)]

I believe the current process (which requires a profile creation w/ a checkbox before profile saving" fulfills the requirement.

Comment 6

[Jishnu Menon :jishnu]

Hi Ben A: You guys have definitely done a lot so far on this (and very quickly), but I don't think we're done per my emails around look and feel (I'll follow up again today but still haven't heard back from UX on my last email) and also I don't think what you've implemented is in production yet.

Also, even once it's in production, I'll still need to run the no-checkbox solution by a bunch of folks (but will be an advocate for what you'll implement) before it's an acceptable substitute for what we do now. 

In the meantime, I've been instructing teams to implement workflows like Affiliates and Firefox Flicks (and now betafarm). 

Ben S and I had talked about this implementation and I think David was coming new to it so we talked over the questions he had today - my response was in reply to David's concerns and we connected over phone today so I think everyone is caught up. If this is surprising or not clear let me know and I can lay out the plan for you realtime.

David/Ben S
The current implementation of labs looks great. A couple things:

1. Ben S - please make sure to purge emails that do not complete the reg workflow on a daily basis per our original conversation.

2. There should be some way to delete the user's account (and it should make a note that it would not delete the Persona account with a link to edit the user's Persona account)

Comment 7

[Ben (:bensternthal)]

1. This is captured in this bug for our next release https://bugzilla.mozilla.org/show_bug.cgi?id=737188

2. When a user edit's his/her profile there is a delete button, this deletes the account. We do not have a text or a link here about persona, but we can add.

Can you provide the text we should add, as this should be consistent across mozilla properties?

As a side not we implemented the same workflow as on firefox flicks (same developer implemented the code).

Comment 8

[Jishnu Menon :jishnu]

Hi Ben S-

Here's my shot - it's not legally significant except for accuracy, if you have better language, please do suggest: "Deleting your account with [service name] will not delete your Persona account. Click here [link to Persona landing page] to edit your Persona account."

It's great you used Flicks, we went through this same exercise with them. Great catch - it would be awesome if we could conform 2 for Flicks - I'll ping the Flicks team and send them to your implementation :) 

We're evolving and trying to make this better (as the products themselves evolve) and don't really get the luxury to standardize yet as we're in beta or so with most of these product suggestions - thanks for bearing with us. 

Cheers,
Jishnu

Comment 9

[Ben (:bensternthal)]

Jishnu,

No prob.. I will add a bug and cc you for the text under the delete button.

Comment 10

[Rebecca Billings [:rbillings]]

Please add QA steps or mark as [qa-]. It seems the issues have been or will be put into other bugs, so I'm unclear on what needs to be verified here.

Comment 11

[Rebecca Billings [:rbillings]]

Closed as [qa-]