On which websites don't we currently enable IP anonymization at the tag level?
On Thu, Feb 26, 2015 at 3:09 PM, Adam Roach <[email protected]> wrote: > I have some sympathy on the IE10 issue, and think a broader conversation > is warranted there. > > With regard to DNT and GA as they apply to Hello, I'm not sure the > situation is directly comparable to www.m.o: we're talking about a > real-time communications service, not just a web page. People will > rightfully be more concerned about privacy with Hello than they do going to > our website. > > In earlier conversations with the legal department, the formal advice > provided for Hello in particular was: "Currently the policy regarding DNT > and GA is inconsistent across the Mozilla and has been handled differently > by different business owners. Marketplace for example turns off GA when DNT > is on. That means the Hello team should set the approach for the moment. As > I've mentioned in various conversations lately, Hello data is going to > become some of the most sensitive stuff that Mozilla touches, so I'd > suggest that we should have a bias in favor of privacy and user preference. > In this case, that would mean respecting DNT." > > I've copied Marshall Erwin in case he wants to weigh in. > > /a > > On 2/26/15 13:45, Christopher More wrote: > > I commented in that bug that IE10 should be ignored as it does not signal > user > intent:http://en.wikipedia.org/wiki/Do_Not_Track#Internet_Explorer_10_default_setting_controversy > > You probably also saw my note on dev-webdev about DNT and GA and why we > haven't disabled it on www.mozilla.org. If you haven't, I will copy/paste > it below: > > Google Analytics isn't respecting DNT for a variety of reasons, but it > doesn't technically mean that it can't. It would simply be a conditional > statement around the tag loading. We have this conversation about every 6 > months since 2012. :-) > > * GA does not collect PII. It's all aggregate trends as hit-level data > isn't very useful. > * We don't directly link the GA sessions/cookies to other 3rd party > services for additional tracking > * All cookies are 1st party Mozilla domain cookies. > * We don't do cross-domain GA tracking as each sub-domain has its own > unique tag and has a sub-domain filter attached to the GA profile. > * We use GA to understand the UX and find out what is working. > * We don't do GA re-targeting like other companies do as common practice. > * We have opt-ed out (at the account level) of Google or 3rd parties from > using the aggregate data to understand general trends. > * We have enabled IP anonymization at the tag level for a few websites. > Others Mozilla websites could do the same. > * We provide a user opt-out of GA and Optimizely for sites that use them in > our websites privacy policy. > > Idealistically, we could say that Apache, caching proxies, or our 3rd party > CDN should not set server/router/network logs when DNT is enabled as that > could be considered by some as "tracking". > > I have also some some research on DNT on www.mozilla.org and while the > percentage is small, there are some browsers that are enabled by default > from the factory, which would make them pretty much disappear from metrics > that are being used to understand the health of the Firefox product. Not > having a clear picture on metrics could negatively impact the health of > Firefox and ultimately lead to reduced impact on our mission. Oh wait, now > I am being idealistic. :-) > > More "light" reading on the topic: > https://bugzilla.mozilla.org/show_bug.cgi?id=858839 > https://bugzilla.mozilla.org/show_bug.cgi?id=697436 > > -cmore > > > On Thu, Feb 26, 2015 at 8:57 AM, Gavin Sharp <[email protected]> > <[email protected]> wrote: > > > +cmore, gareth > > I think most of these suggestions are already implemented (see > e.g.https://bugzilla.mozilla.org/show_bug.cgi?id=1129507). > > Gavin > > On Thu, Feb 26, 2015 at 12:48 AM, Alexis Métaireau <[email protected]> > <[email protected]> > wrote: > > Hi, > > Here is a set of good practices in the usage of Google Analytics. I > > believe > > we should implement these for the loop-client webapp, which is relying > > on GA > > currently. > > — Alex > > > -------- Forwarded Message -------- > Subject: [webdev] Blog Post: Privacy and Google Analytics > Date: Mon, 23 Feb 2015 21:53:06 -0800 > From: Chris Van Wiemeersch <[email protected]> > <[email protected]> > To: dev-webdev <[email protected]> > <[email protected]> > > > > I stumbled upon this blog post by fellow Mozillian, Guillaume Marty > (gmarty): > > http://gu.illau.me/posts/privacy-and-google-analytics/ > > A few months ago on the Marketplace team we discussed whether Google > Analytics should be disabled when Do Not Track is enabled. The consensus > was no - but with an asterisk. > > This blog post is a good read for those who want to use Google Analytics > without sacrificing user privacy (i.e., you!). > > > Best, > > cvan > _______________________________________________ > dev-webdev mailing > [email protected]https://lists.mozilla.org/listinfo/dev-webdev > > > > _______________________________________________ > dev-media mailing > [email protected]https://lists.mozilla.org/listinfo/dev-media > > > > > -- > Adam Roach > Principal Platform Engineer > [email protected] > +1 650 903 0800 x863 > _______________________________________________ dev-media mailing list [email protected] https://lists.mozilla.org/listinfo/dev-media
