I am disappointed that these Terms went into effect immediately, without any chance for review or comment by the community. This is counter to how Wikimedia processes should run, and flies in the face of the values of the Wikimedia movement.
I am concerned about some of the provisions of these Terms. For example, 7.3 bullet 3 states > Not collect any other Personal Information and Wikimedia Usernames from End > Users, other than any user agent information forwarded by the anonymizing > reverse proxy or OAuth provided usernames and email addresses. One of my tools, signatures.toolforge.org, provides data on a user's signature from their username. The queried username is included in the path, and is logged by the default uwsgi logging configuration. It is likely that at least some End Users will check their own usernames, so therefore the tool is collecting Wikimedia Usernames from End Users. This *shouldn't* be a violation of the Terms, but by a plain reading of them, it is. I am also concerned that https://wikitech.wikimedia.org/wiki/Wikitech:Cloud_Services_Terms_of_use#5._Limited_use_of_third-party_resources_allowed makes reference to a non-existent policy and refers to itself with a different title. I am also disappointed that the revised Terms still require tools to be under an OSI-compliant license, without permitting the use of CC-0 or public domain grants. The requirement to request and be granted an exemption to run one-off scripts without releasing them also seems too arduous to be useful. Either free licenses should be required for everything, or the approval requirement should be dropped. The warning at the top should also make clear that developer email addresses are public to the Internet, not merely to other WMCS users (for example, at <https://ldap.toolforge.org/user/anticomposite>). The overall layout of the Terms is also confusing, with very short sections referring to other very short sections on the other side of the document. AntiCompositeNumber (he/him) On Fri, May 26, 2023 at 9:46 AM Andrew Bogott <abog...@wikimedia.org> wrote: > > After nearly a decade of mishap and delay, we have updated the WMCS > terms of use. The updated document for toolforge and cloud-vps admins > can be found here: > > https://wikitech.wikimedia.org/wiki/Wikitech:Cloud_Services_Terms_of_use > > > and the terms of use for visitors to WMCS sites can be found here: > > https://wikitech.wikimedia.org/wiki/Wikitech:Cloud_Services_End_User_Terms_of_use > > > There is one significant change in these terms: Cloud-vps projects which > collect personal data will need to include an explicit privacy policy > for their projects. This is section 7.3. For other WMCS users and admins > these documents do not represent any significant change in policy, but > do clarify and finalize many things that were poorly-worded in the > previous TOU, or policies that we have enforced informally without > officially stating. > > Please feel free to reach out to WMCS staff if you find any part of > these documents concerning or disruptive to your work on our platforms. > > > -Andrew > > > > > > > _______________________________________________ > Cloud-announce mailing list -- cloud-annou...@lists.wikimedia.org > List information: > https://lists.wikimedia.org/postorius/lists/cloud-announce.lists.wikimedia.org/ > _______________________________________________ > Cloud mailing list -- cloud@lists.wikimedia.org > List information: > https://lists.wikimedia.org/postorius/lists/cloud.lists.wikimedia.org/ _______________________________________________ Cloud mailing list -- cloud@lists.wikimedia.org List information: https://lists.wikimedia.org/postorius/lists/cloud.lists.wikimedia.org/
