Package: tiled
Version: 1.4.3-1
Severity: normal
Forwarded: https://github.com/mapeditor/tiled/issues/2939
X-Debbugs-Cc: onit...@gmail.com

Dear Maintainer,

When starting Tiled for the first time on a new system, the two options
"Display news in status bar" and "Highlight new version in status bar" are
enabled by default.
When turned on, these two options cause Tiled to contact online services to
obtain the respective information.

However: User aren't informed about the fact, and neither are they on what
personal information is shared and with whom.

This may a potential violation of GDPR, CCPA or other data protection laws.
It doesn't look like there is an official policy for dealing with privacy
issues in Debian packages, but I've seen complaints in other packages that had
to be addressed.

Additionally, the update check is not that useful when applications are
installed via package manager and not manually downloaded.

Please consider disabling the two checks by default for Debian packaging.

I also forwarded the issue to the upstream but tracker:
https://github.com/mapeditor/tiled/issues/2939

Thanks!



-- System Information:
Debian Release: bullseye/sid
  APT prefers testing
  APT policy: (900, 'testing'), (500, 'unstable-debug'), (500, 
'testing-debug'), (300, 'unstable'), (1, 'experimental-debug'), (1, 
'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.9.0-2-amd64 (SMP w/4 CPU threads)
Kernel taint flags: TAINT_USER
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_GB:en
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages tiled depends on:
ii  libc6           2.31-4
ii  libgcc-s1       10.2.0-16
ii  libqt5core5a    5.15.1+dfsg-2
ii  libqt5gui5      5.15.1+dfsg-2
ii  libqt5network5  5.15.1+dfsg-2
ii  libqt5qml5      5.15.1+dfsg-3
ii  libqt5widgets5  5.15.1+dfsg-2
ii  libstdc++6      10.2.0-16
ii  libtiled1       1.4.2-1

tiled recommends no packages.

tiled suggests no packages.

-- no debconf information

Reply via email to