On 11/12/2014 17:37, Mook wrote:
Hi all,
I was trying to migrate to FxA (from the old sync), and in the
progress read through the privacy notice / terms (
https://accounts.firefox.com/legal/privacy and
https://accounts.firefox.com/legal/terms ), and had a few questions
and comments: (Please redirect me as appropriate; this seemed like the
best place.)
Thanks for taking the time to read and give detailed feedback!
I'm not the best person to answer these but I'll try to make sure they
get to the right place. That may mean spinning them off into separate
bugzilla bugs for legal review.
- The privacy notice doesn't mention anything about things Mozilla
*doesn't* have access to - as written, it's perfectly fine for Mozilla
to have access to my synced passwords. That's... kind of a
deal-killer for me. Was that intended?
I'm not clear what you're looking for here - do you want an explicit
statement along the lines of "mozilla does not have access to your
passwords"?
For the record, we don't have such access. But I think I can see why it
was not explicitly drafted to say that, because...
Can there at least be
language about opting out of the ability to recover my password (and
saying that Mozilla will honour that by explicitly not having access
to those things in that case)?
...during development, we had plans for an opt-in ability to recovery
your sync data in the event of a forgotten password. This was never
implemented, so there's currently nothing for you to opt out of.
- Also for the terms: Section 7 (Terms; Termination) says that if I
cancel my FxA account, the only sections that remain are 8, 9, and 11;
notably, 5 (dealing with how Mozilla is allowed to handle things I
send over) no longer applies. That means all my data must be
immediately deleted?
I believe this is intentional, and we do delete your associated sync
data if you delete your firefox account. "Immediately" is probably too
strong a word, but we try to delete it in a timely manner.
Cheers,
Ryan
_______________________________________________
Sync-dev mailing list
[email protected]
https://mail.mozilla.org/listinfo/sync-dev
