https://qa.mandrakesoft.com/show_bug.cgi?id=1645
Product: drakfirsttime
Component: drakfirsttime
Summary: No opt-out of sharing of personal info/Confusing text
Version: 0.91-3mdk
Platform: PC
OS/Version: All
Status: UNCONFIRMED
Severity: normal
Priority: P2
AssignedTo: [EMAIL PROTECTED]
ReportedBy: [EMAIL PROTECTED]
Drakfirsttime seems to have a double purpose and these are very blurred right now.
1) Collect data for MandrakeSoft, such as name and address, as well as to sign
people up for the various Mandrake websites.
2) Set up the user accounts for the first time users. Set up all the mail
programs so that they work right after login, etc.
However, it is impossible to distinguish between these two right now and
drakfirsttime makes it sound as if the setup information for the mail programs
will be sent to MandrakeSoft. The privacy policy is worthless ... see below.
Here is what needs to happen:
a) The privacy policy has to be corrected and shortened or even removed. Was
this copied verbatim from a Mandrake website?
" What personal data do we collect ?
Various information is collected in different areas of the website;
what follows is an overview of the data we keep:
Firstly, we record your email address, name and postal address."
a1) What! drakfirsttime sends my email address, name and postal address to
MandrakeSoft! This is sufficient reason for users to close drakfirsttime right
away.
a2) "areas of the website"! This phrase makes me believe that this text was
simply copied from MandrakeExpert.
a3) The text as a whole makes me believe that everything that I enter into
drakfirsttime will be sent to MandrakeSoft.
b) On every single page that asks for user data that is meant to be only used on
the local computer, it needs to be clear that the data will not be sent to
MandrakeSoft. The user should not see any privacy policy before or during the
entering of this information in order not to confuse the user.
c) On all pages that ask for data that will be used on the local computer as
well as sent to MandrakeSoft, there has to be an "opt-out" button allowing the
user not to send any data to MandrakeSoft.
This way, users can use drakfirsttime to setup their accounts without having to
share their data.
I suggest that the privacy policy be accessible from this screen by the push of
a button.
d) On all pages that ask for data that will be sent to MandrakeSoft, [and
provide no setup information for the local account] such as the signup for
Mandrake Expert, the Mandrake Club etc, it has to be made absolutely clear that
all data entered on such a page will leave the local computer and be sent to
MandrakeSoft. No data may be obtained from b) or c) and sent away without the
user's consent. [E.g. use data from b) and c) to fill in fields in d), this
allows the user to remove it]
I suggest that the privacy policy be accessible from this screen by the push of
a button.
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.
