I have some sympathy on the IE10 issue, and think a broader conversation is warranted there.
With regard to DNT and GA as they apply to Hello, I'm not sure the situation is directly comparable to www.m.o: we're talking about a real-time communications service, not just a web page. People will rightfully be more concerned about privacy with Hello than they do going to our website. In earlier conversations with the legal department, the formal advice provided for Hello in particular was: "Currently the policy regarding DNT and GA is inconsistent across the Mozilla and has been handled differently by different business owners. Marketplace for example turns off GA when DNT is on. That means the Hello team should set the approach for the moment. As I've mentioned in various conversations lately, Hello data is going to become some of the most sensitive stuff that Mozilla touches, so I'd suggest that we should have a bias in favor of privacy and user preference. In this case, that would mean respecting DNT." I've copied Marshall Erwin in case he wants to weigh in. /a On 2/26/15 13:45, Christopher More wrote: > I commented in that bug that IE10 should be ignored as it does not signal > user intent: > http://en.wikipedia.org/wiki/Do_Not_Track#Internet_Explorer_10_default_setting_controversy > > You probably also saw my note on dev-webdev about DNT and GA and why we > haven't disabled it on www.mozilla.org. If you haven't, I will copy/paste > it below: > > Google Analytics isn't respecting DNT for a variety of reasons, but it > doesn't technically mean that it can't. It would simply be a conditional > statement around the tag loading. We have this conversation about every 6 > months since 2012. :-) > > * GA does not collect PII. It's all aggregate trends as hit-level data > isn't very useful. > * We don't directly link the GA sessions/cookies to other 3rd party > services for additional tracking > * All cookies are 1st party Mozilla domain cookies. > * We don't do cross-domain GA tracking as each sub-domain has its own > unique tag and has a sub-domain filter attached to the GA profile. > * We use GA to understand the UX and find out what is working. > * We don't do GA re-targeting like other companies do as common practice. > * We have opt-ed out (at the account level) of Google or 3rd parties from > using the aggregate data to understand general trends. > * We have enabled IP anonymization at the tag level for a few websites. > Others Mozilla websites could do the same. > * We provide a user opt-out of GA and Optimizely for sites that use them in > our websites privacy policy. > > Idealistically, we could say that Apache, caching proxies, or our 3rd party > CDN should not set server/router/network logs when DNT is enabled as that > could be considered by some as "tracking". > > I have also some some research on DNT on www.mozilla.org and while the > percentage is small, there are some browsers that are enabled by default > from the factory, which would make them pretty much disappear from metrics > that are being used to understand the health of the Firefox product. Not > having a clear picture on metrics could negatively impact the health of > Firefox and ultimately lead to reduced impact on our mission. Oh wait, now > I am being idealistic. :-) > > More "light" reading on the topic: > > https://bugzilla.mozilla.org/show_bug.cgi?id=858839 > > https://bugzilla.mozilla.org/show_bug.cgi?id=697436 > > -cmore > > > On Thu, Feb 26, 2015 at 8:57 AM, Gavin Sharp <ga...@gavinsharp.com> wrote: > >> +cmore, gareth >> >> I think most of these suggestions are already implemented (see e.g. >> https://bugzilla.mozilla.org/show_bug.cgi?id=1129507). >> >> Gavin >> >> On Thu, Feb 26, 2015 at 12:48 AM, Alexis Métaireau <ale...@mozilla.com> >> wrote: >>> Hi, >>> >>> Here is a set of good practices in the usage of Google Analytics. I >> believe >>> we should implement these for the loop-client webapp, which is relying >> on GA >>> currently. >>> >>> — Alex >>> >>> >>> -------- Forwarded Message -------- >>> Subject: [webdev] Blog Post: Privacy and Google Analytics >>> Date: Mon, 23 Feb 2015 21:53:06 -0800 >>> From: Chris Van Wiemeersch <cwiemeer...@mozilla.com> >>> To: dev-webdev <dev-web...@lists.mozilla.org> >>> >>> >>> >>> I stumbled upon this blog post by fellow Mozillian, Guillaume Marty >>> (gmarty): >>> >>> http://gu.illau.me/posts/privacy-and-google-analytics/ >>> >>> A few months ago on the Marketplace team we discussed whether Google >>> Analytics should be disabled when Do Not Track is enabled. The consensus >>> was no - but with an asterisk. >>> >>> This blog post is a good read for those who want to use Google Analytics >>> without sacrificing user privacy (i.e., you!). >>> >>> >>> Best, >>> >>> cvan >>> _______________________________________________ >>> dev-webdev mailing list >>> dev-web...@lists.mozilla.org >>> https://lists.mozilla.org/listinfo/dev-webdev >>> >>> >>> >>> _______________________________________________ >>> dev-media mailing list >>> dev-media@lists.mozilla.org >>> https://lists.mozilla.org/listinfo/dev-media > > -- Adam Roach Principal Platform Engineer a...@mozilla.com +1 650 903 0800 x863 _______________________________________________ dev-media mailing list dev-media@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-media
