El vie., 6 de mar. de 2020 a la(s) 03:41, Martin Flöser ([email protected]) escribió: > > Am 2020-03-05 21:19, schrieb Daniel Vrátil: > > Hi all, > > > I would appreciate any hints and pointers at where exactly the KDE PIM > > Privacy > > Policy might be in violation of the requirements from Google. I may > > have been > > looking into those documents for so long I can no longer see anything > > :/
It sounds as if Google didn't understand the actual meaning of any of the 3 items they quote (eg. when we tell users to look at the privacy policy of third-party services, *Google* is the third-party service in question). > Reading [0] I see "Your use of data obtained via the Restricted Scopes > must comply with these requirements:" ... "Only transfer the data to > others if necessary to provide or improve user-facing features that are > prominent in the requesting application's user interface" > > And reading the screenshot I think that's the problem. We state in our > privacy policy about 3rd party plugins and Akonadi. Especially Akonadi > is a "transfer of data to others" and that allows all applications to > access the data. If KWin accesses the data it would be in violation of > the additional requirements of the requested scope. If I add my Google account to KDE PIM, it will sync my email and calendar events with Akonadi. Third-party apps can then access my email and calendar events via Akonadi. If I add my Google account to iPhone, it will sync my calendar events with the system calendar database. Third-party apps can then access my calendar events via EventKit. If I add my Google account to Mozilla Thunderbird, it will sync my email with its database. Third-party addons running inside Thunderbird can then access email content. Apple can give its million appstore apps access to Google calendar data, and Mozilla can let addons access email data, but we can't? What do they do differently? Also, Linux desktop systems are usually not sandboxed. If we didn't have Akonadi, and KOrganizer/KMail/etc used their own databases to store data without intending to share them with other apps, other apps could *still* access the data via the filesystem. Mozilla Thunderbird is approved by Google, and KWin theoretically *could* access my email because it can read ~/.mozilla. Sure, in practice it doesn't; but in practice it also doesn't access Akonadi. -- Nicolás
