I get a smattering of bugs filed with the security confidential flag set because people want to keep their names or email addresses private, or even sensitive information like passwords (recent example: bug 277541). We need a privacy policy somewhere (preferably linked in bold from the page where you commit a bug) that says that all bug information is public. Even bugs marked confidential according to our security policy will eventually be made public.

Since sometime in the last 6 or 8 months, we've had the following privacy notice on the "create an account" page before you sign up for an account: ----8<---- PRIVACY NOTICE: Bugzilla is an open bug system. All activity on any bug you file will be visible to the public, including the email addresses of those involved. Although steps are taken to hide addresses from email harvesters, the spammers are continually getting better technology and it is almost guaranteed that the address you use with Bugzilla will get spam. We recommend using a free web email service (such as Yahoo or Hotmail or similar) and not your primary email address if this concerns you. There are solutions being worked on to allow you to hide your email address from other users, but that option is not yet available. ----8<---- That said, we could probably still use a real privacy notice that we could link to from the footer or somesuch.

Here's the overall Mozilla privacy policy that you we should link to: http://www.mozilla.org/privacy-policy.html Bugzilla is covered here.

Sounds good. Let's link to that in addition to the Bugzilla-specific info we have now. Gerv

This is a bmo customisation, so Dave or Myk would need to do it. Gerv

*** Bug 275628 has been marked as a duplicate of this bug. ***

I'll add this.

Done. Link added to index.cgi and createaccount.cgi for the Bugzilla upgrade. https://landfill.bugzilla.org/prodpatches/ https://landfill.bugzilla.org/prodpatches/createaccount.cgi

https://landfill.bugzilla.org/prodpatches/createaccount.cgi now looks rather scary. Can we consolidate or reduce the information in some way? Gerv

(In reply to comment #8) > https://landfill.bugzilla.org/prodpatches/createaccount.cgi now looks rather > scary. Can we consolidate or reduce the information in some way? Blame timeless. What would you like to see? It wasn't much better in the current bmo version at https://bugzilla.mozilla.org/createaccount.cgi. :(

Here's my suggestion, then: To start creating a Bugzilla account, enter your email address: [ ] Sign Up (<a href="">privacy policy</a>) Note: Bugzilla is a public site. All data you submit may be visible to the public, including your email address. While we do our best to prevent it, this may mean you get spam. If this concerns you, sign up using a disposable email address from a webmail provider. And on the page resulting from clicking "Sign Up": You will shortly receive an email at <address>. You will not be able to log in until you act on the instructions contained in it. If it doesn't arrive within two hours, contact the administrator, <admin>. Note: the administrator will ignore support email relating to Mozilla products. Gerv

Gerv - some of us have been working on strings (specific to b.m.o) here http://docs.google.com/Doc?id=dhmd4jxt_7gf3tpz I would have the Please Note: section at the top with some room between it and the next section. I'd like to make links to support forums very obvious in the initial sign up process to help minimize the people that come to bugzilla for support. I'd also like to include in it a link to a page that explains how to know if you're experiencing a reportable bug or whether you should seek support.

(In reply to comment #11) > Gerv - some of us have been working on strings (specific to b.m.o) here > http://docs.google.com/Doc?id=dhmd4jxt_7gf3tpz Er, OK... perhaps you'd like to incorporate what you like from my draft into yours? I don't quite understand how you've formatted that page - it's rather confusing. And I (gerv.markham) don't have edit access anyway. > I would have the Please Note: section at the top with some room between it and > the next section. I'd like to make links to support forums very obvious in > the > initial sign up process to help minimize the people that come to bugzilla for > support. But they are already very obvious on the front page, from where people are going to be coming if they are trying to sign up for an account. > I'd also like to include in it a link to a page that explains how to > know if you're experiencing a reportable bug or whether you should seek > support. Again, isn't the front page, which attempts (via the yellow box outlined in red) to send people arriving at Bugzilla to the right place, the best location for this information? Gerv

that's it's intent, but it really isn't very effective. I have issues myself finding info on that page and I see it several times. As well, anyone can end up on the main page. I personally think the best place to really get in users' face about it is when they're signing up. Then they only see it once, but we can be fairly certain they'll see it, and we can also take more room to talk about it rather than clutter up the main page. For the formatting instead of having two columns and two rows, I have 1 column and 4 rows. Two of the rows go above the signup field, and then the rows about the privacy notice go below. So, something like this: --------<--top of page Please note support info ect. : : : Instructions to sign up, what happens next etc. [ ] [Sign up] Privacy notice about spam --------------- I think we're saying the same things, I'm just saying more in some places. Although I think I do like the idea of moving the part about the support admins to the page you get after you've clicked.

Fair enough. You're clearly on top of this; I've you've considered my suggestions, I'm happy :-) Gerv

As long as you agree that what I had already said already covers what you want to say, if not please let me know and I can tweak something :)