On 7/25/12 3:33 PM, Winston Bowden wrote:

To do so, we would like to provide users with the ability to enter
their mobile phone number to receive a text to their phone containing
the download link.  Although a one-time use, we’d need to keep their
phone number to protect against abuse (someone entering the same
number multiple times).  We’d also like to include a checkbox for
users who would like to opt-in to ongoing SMS messages from Mozilla.

Overall, this sounds pretty reasonable. But I'd want to ask a couple of questions:

1) How reliable/trustworthy are such vendors? I never opt-in to such things (and, conversely, always opt-out :), but have noticed what seems like a trend of getting unwanted spam long afterwards. I can only assume this is a result of sly/aggressive marketers thinking I've forgotten or changed my mind. It's almost pure upside from them to ignore my choice.

2) Related, have we considered keeping this list inside Mozilla, and/or using technical measures like hashing to limit its risk?

3) How long are these numbers kept for anti-abuse? Seems like limiting it to a few days/weeks (or more if an explicit stop-doing-this is requested) would be sufficient.


Proposed Update to Firefox Privacy Policy –

[...]Unless you opt-in to ongoing SMS
messaging, the mobile phone number you input on the website will be
used and stored only for the purpose of sending this one-time message
and to provide abuse blocking, where available.

If a user does not opt-in to ongoing SMS, will the download message still be tracking if they perform the actual download?

Justin
_______________________________________________
governance mailing list
[email protected]
https://lists.mozilla.org/listinfo/governance

Reply via email to