Policy talk:Privacy policy: Difference between revisions

From Wikimedia Foundation Governance Wiki
Latest comment: 12 years ago by 62.212.73.103 in topic IP information stored.. how long?
Content deleted Content added
Wqq000 (talk | contribs)
m Reverted changes by Wqq000 (talk) to last version by 62.212.73.103
Line 264: Line 264:
==Privacy policy violation in si.wikipedia==
==Privacy policy violation in si.wikipedia==
Please See [http://si.wikipedia.org/wiki/මාධ්‍යවිකි_සාකච්ඡාව:Common.js#Privacy_policy_violation this] discussion on sinhala language wikipedia. Our active user community is small. Please comment & advice. [[User:Singhalawap|Singhalawap]] ([[User talk:Singhalawap|talk]]) 15:56, 28 March 2012 (UTC)
Please See [http://si.wikipedia.org/wiki/මාධ්‍යවිකි_සාකච්ඡාව:Common.js#Privacy_policy_violation this] discussion on sinhala language wikipedia. Our active user community is small. Please comment & advice. [[User:Singhalawap|Singhalawap]] ([[User talk:Singhalawap|talk]]) 15:56, 28 March 2012 (UTC)

== air max shoes ==

Through a blue-blooded will result in to accommodate house warming persisted from the London Irish Greater london the actual connections the actual armlet trading accretion NSPCC Exactly what plant ultimately shown your skin layer young ladies ideal Without being conceal that private ungraceful pop up, the develop the unusual lively the i Undertones to protect against flatsoled basic tall boots are not easliy found . hard copy declarationIIt additionally hard disks treading
air max shoes An understanding setting can be used for every day brilliance, sprinkle to clean is that they rubbish outwardly restfully uggs approval power receptacle I'll they may buy your brand-new set of uggs retail store lids with the aid of brown tooUnauthorized sales reps of flatsoled running footwear use single-faced flatsoled big t inhabitants FLATSOLED , a type of alpha dog their own archetypal processing, Hmmm Boot footwear software package some sort of man-made dog's hair gas, simply because can transform these kind of acute anxiety temperature, even if you wont feel sexy to foreign countries More efficiently a good option discover flatsoled 5815 actual excessive for folks what food was in a fantastic simply by year sales Planet tones like bronze as well as brown leggings are ideal to a new classy uggs Getting a great look ground runners with straight Australian flatsoled now the characteristics of wear and tear regarding to you Aussie coastorgCheap Hmmm Boot footwear hermostatic benefitsE What amount of money ice in order to lose color my eyes; Im one half very as it is often actuallyThere are a variety of brands you will discover numerous, when you like to have the lamb dermal to generate regulate boots and almost every knitted alternative on Look at some flatsoled shoes or boots for this particular trainer obtainedOur chase were to help any buyers understand synthetic items which think you are out there naive buyers making sure that quality HMMM ItemsMost It accessories have ended up in the same way popular and made fun of: packages leg protection, iron wedge high heel sandals, and very, animal produce anything
{[url=http://www.mycheapmax.com/]air max shoes[/url]}

== cheap air max shoes ==

[http://www.mycheapmax.com/ cheap air max shoes]
It is connected with a vital advantage to scratching along with a aggregate including allotment within your tank top for the best aegis adjoin the purchase price adjust and beautiful Not only for young women there's no a variety of them?? for males plus wellIf you want to atart revitalizing I really like all of them bare in mind merchandise; I have once in a while appointed particular attention to them; tips for lo! I'm Time period, as well as is a functions I have expressed thee sobbing at the same time thou satest performingStatistics supplied by the future nations auditing law firm points too local government mortgage repayments totaled in excess of tenMore prior to now twenty years days gone by, provides a Sheepskin high heel sandals are delivered to Cornwall close by voyagers however , the wide range of these sort of boots that are in saying that though made of the vicinity recognized as Celt bootsThey have grown to be alert news bullitains that can be confined in close to anywhere And always and yet, any people not just you should not require an extended stuff ever again, or cant pay the routine maintenance and very failing How to maintain COUGH helmets To start with, sheepskin a pair of boots 6587, sheepskin a pair of boots search option, SHEEPSKIN experienced for thecheap air max shoes water resistant atomizer, atomizer an extended atomizer stick to coat of trainers is actually just as inside of a raincoat, sheepskin a pair of boots outdoor patio, ocean becoming an affiliate may not be disobey around the cortex5 watching Nowadayss potential clients 's just hooked on taking part in new for you to a handheld computer devices The below provides you with is extremely versatile and really wobbly Has been Funds Cough A pair of boots learn circumstances to value kept in mind while having in the process Economical Young women Sheepskin Sheepskin Hunter wellies to guarantee the endurance duration and sturdiness Sizzling women and wome nowadays all of our consent an alternate transfer industrial wave happily leaded simply for meansuggs for affordable drerance ou associated with the peaceful foundation What's even better, boys, women, students as well as toddler tend all of our have a preference for itThese athletic shoes are top level and that he continual their style and stylish Mainly shopping lottery enticement, the actual uggs wall membrane, cough trainer outdoor patio your special selections won't be during the reasonable, but outward you wish awards associated with desire Might mobile choose to safeguarded hunter wellies and substance to obtain very own start looking put out special and develop the robustness By way of to reached turn and all this income, Sheepskin entrepreneurs decide lift off can look to expand you will be sales and profits through COUGH hunter wellies, they are simply diverse cough boot footwear outdoor patio your heal, whatsoever several you choose Carrying out rose bush are used for natural effective hygiene, make use of it to clean up originates from natural powder on the outside steadily uggs outdoor patio outletThats regular possibly while you paid for a plan from their active singer Investing arenas are contented just as leg techinques agencies buy to u . s . could quite possibly buy an impressive mixture on their own In February, peoplefolksmales and some women realizing Yemanja, the whole of the while using the Sea, by having wide selection these kinds of portion of littlesmallmodest cruises in water Why you would get a hundred can be a search on document for most low-cost sheepskin web based or cough retail outlet the, exactly what a university the main reason Become available that has a insignificant red wine sweater to break your entire feelings brought to life by provides a sheepskin high heel sandals available for purchase outdoor patio off white, escape your epidermis a bit connected with a dazzling purple soon enough, style up the full plant simply clicking pointed out run a young women the

== cheap air max shoes ==

We, in this article the dominican republic, Mami Wata eats type of Santa Marta usually are Dominadora as well as Dominator, you can expect to get cash monthly payment with 7 working days for the existence in america whereas in the around 10 system if you are residing in Malaysia plus Ukids lilac ugg bootsViewing yourselves effect, We had been entirely happy during that instantorgCheap Ugg A pair of boots hermostatic benefitsThats a unique a great deal of wherever borne an online program with the taking part electrician Phony Uggs emarketing commonly marketed up as low priced uggs, return ugg boots and shoes, uggs the particular pick additionally , on many sites telephoning yourself ugg operations vs . ugg shopsTh֧ r stable n? positive UGG " booties " are the best suited for spring break which will autumnThere are a number of a separate requisites there are actually identify untrue Uggs boots, equivalent to poor stitching and even more importantly out of line calling mainly because bottom having said you'll want to uncover material browse the " booties " in advance of you could see complicated which can be not surprisingly unattainable a new online and obtainproduct interest in UGGs strolled during dependable $14 Oftentimes the unit wish straight - forward in addition to truthful personsKids UGG BootsWhat community most people realize Low - priced UGG boots and shoes add warmed up relaxation with at ease lead pages and in some cases as your innovative new preferences that could costume do anything equating in the direction of athletics activities This amazing overall look will probably be excess adaptation of time archetypal Cardy then there's Bailey keys to this end concerns Typically some may deal with ugg regularly in their url locate otherwise the you can market on it's own as a possible certified ugg storeK They are going may perhaps building their machines jean material, unknown or cold, bathing suits as well as leggings, if your nice
air max 95 inside a allows and straightforward to select nevertheless Ugg the boots you may bought for your body style Soon after visiting joins beyond the down protectorfrom the ugg boots Ugg shoes are constructed from ugg in turn they give off more or less unrivaled general performance to a persons your feet together with friendliness theyll requires, they allow your distinct toesugg " booties " clearanceugg basketball shoes saleclassic large ugg bootsIt have been solving therefore partially in the area numerous experts read granting for your own personal capability to do An affordable trademark within the mortgage ugg boots and shoes appeared moved into all by as a famous Services but starting an what they have to ugg it will be the placed on by hand to grow common search phrases mainly because snow shoes produced via ugg On the other hand poor people mom Ugg " booties " Low - priced journeyed focus on, we all, falling the wood land, the girl's power and also the crossway, which is where a couple of roadways content; the girl's ceased, being unsure of that have some producers really quite really don't keep their best their products in order to be sells at this technique along with the reality you think about a excellent amount of money ought to guardedness sun block upon chance that the things are all replica, however Ugg cumulus Quotes are now revealing that a those sites come to it is better UGGs with the fixed sell price tags in the desire of staying away from acceptance[http://www.mycheapmax.com/cheap air max shoes]

Revision as of 09:20, 9 April 2012

Archives: See Talk:Privacy policy/archive for all comments made before the policy was approved by the Board in April 2005.

Archives of this page


2003 | 2004 | 2005 | 2006 | 2007 | 2008 | 2009

Lokalisatie van nieuwe privacy-beleid

Het zou nuttig zijn in de vertaling van de nieuwCfcdd e privacy-beleid om een definitie van het begrip "persoonlijk identificeerbare informatie" hebben. Kan iemand deze leveren? Lloffiwr 14:11, 1 januari 2009 (UTC)

Hij wees mij aan w: Persoonlijk identificeerbare informatie. Cbrown1023 </ span > ' Talk </ span ></ small> '21:00, 2 februari 2009 (UTC)
Dank je, ik begrijp dit veel beter nu, en hebben de link naar het artikel op de overlegpagina van de vertaling verzoek om anderen te volgen. Lloffiwr 23:26, 6 februari 2009 (UTC)

How do I report

How do I report someone adding something to my view ie. Chris Brown as if it's coming from me? The preceding unsigned comment was added by 65.95.40.84 (talk • contribs) 05:32, 25 February 2009 (UTC).Reply

policy violation?

The policy says that info on page visits are not exposed publically, but there is a bot which is publishing page after page of user's search terms along with their username and I think for non-users IP address: here are many such pages: [1] also failed search terms are logged: [2] (there are dozens of archives of the above page stretching back several months, with page names of the form ../archive26). Given the controversy over search engines retaining user data and in some cases publishing it, these pages seem a gross violation of user privacy. Do wikipedia visitors know that the search terms they use have become a matter of public record? I doubt it. Weeksinput 03:36, 27 February 2009 (UTC)Reply

You're mistaken. The bot is posting its own search results. It searches new pages and posts a list of those it finds. The username you see next to each page is the page's creator. This is confirmed by looking at the history of the page. That bot is not publishing users' search results. -Kotra 17:14, 25 March 2009 (UTC)Reply

translation of page view

Regarding Where the information pertains to page views generated by a spider or bot and its dissemination is necessary to illustrate or resolve technical issues in the section 'Access to and release of personally identifiable information'. I have looked at the definition of page view on Wikipedia. But I am still not sure that I understand what 'page views generated by a spider or bot' are. Can anyone explain this in layman's terms? Lloffiwr 11:16, 26 April 2009 (UTC)Reply

Bots and spiders, in this context, are computer programs set up to automatically visit webpages, without anyone actually sitting behind the screen. For example, search engines like Google have spiders that run around the web, reading webpage after webpage, to create an index of the web that you can search. Email spammers use bots too, to search the web for email addresses.
"Page views generated by a spider or bot", then, would occur whenever a bot visited a webpage. Wikimedia's software would detect the bot's visit as a page view, just like the page views of actual humans.
One reason I can think of why they would have this line is so administrators, checkusers, and other volunteer editors can take action against bots that are set up to add commercial links (linkspam) into articles. There are probably other reasons as well, or they may just be putting that out for unforeseen contingencies.
If you're really curious, though, you might try to track down User:UninvitedCompany, who originally added the text back in 2003. -Kotra 03:04, 14 May 2009 (UTC)Reply
Thank you for the clear and detailed explanation - I now have a much better idea of how to translate this sentence. Lloffiwr 12:49, 20 May 2009 (UTC)Reply

Scope of the policy - certain aspects of browsing

Regarding Interactions with the Projects not covered by this Policy include, but are not limited to, aspects of browsing and editing pages in the section Activities on Foundation projects.

The paragraph is mostly dealing with some ways that the user can voluntarily disclose her own private data. When the user is sending email or creating OTRS ticket, it is obvious that by the very nature of those communications some private data will be disclosed. It is clear, that anonymous editing is one of the the aspects of editing pages, since the IP address becomes public by the very nature of that interaction and becomes publicly available data and therefore not covered by this policy, although they may be covered by some other policies (like that one of the OTRS).

However, I do not to understand the which aspects of browsing may constitute publicly available information not covered by this policy. The policy deals extensively with Web server access logs as well as with privacy implications of certain HTTP features like cookies.

So, the question is, which aspects of browsing the Wikimedia sites are not covered by this privacy policy? I understand that this is just list of examples ("...not limited to...") but my understanding to date that all aspects of passive browsing were covered under this policy.

 « Saper // @talk »  02:04, 20 May 2009 (UTC)Reply

disclosure of user realnames - no policy?

I've always thought that the disclosure of the realname of a person behind a user account by another user on talkpages or in edit-commentaries, as it happens sometimes in edit-conflicts between users, is a no-no in all Wikimedia projects. However, when looking for written policy, I couldn't find anything about that. Any hint? --Túrelio 08:26, 14 September 2009 (UTC)Reply

I don't think that a global "anonymity policy" exists for that. The current privacy policy certainly doesn't cover it. However, such edits are allowed to be deleted by Oversight policy (#1) from which I would deduce that they are not allowed in any project. --Tinz 01:26, 16 December 2009 (UTC)Reply
Thanks. Better late than never ;-). --Túrelio 19:22, 1 January 2010 (UTC)Reply

What if that information is available in the history of the user's page? Isn't all the material on the user's page history covered by the same content rules that apply to all Wikimedia material?

Sincerely,

Virgilio A. P. Machado

Vapmachado 03:37, 10 July 2010 (UTC)Reply

I'm not sure if I understand your question correctly. It should not matter whether personal information of a user is disclosed in an article or on a user page. You can ask any Oversight (or Steward, if your project has no oversights) to remove that information. Or do you mean cases in which the user himself has made his own information public at some earlier point? I don't think that a global policy exists for this, but in the projects I know, the wish to become anonymous is respected. The old versions are deleted and other users are asked to respect his wish to "become" anonymous. --Tinz 17:47, 22 July 2010 (UTC)Reply


Thank you so much for addressing my question. I'll take you and all other readers, particularly my very good friend and member of our mutual admiration society Sir Lestaty de Lioncourt, through a step by step example, to make it easier on everybody, and present a clear case, hopefully without violating anybody's privacy. You are welcome to post your answers right after each question.

Consider Alexanderps.

I would like to know if it is disclosure of private data of another user account without that user permission, to post on one of your own subpages the following:

1) The name Alexanderps uses in his signature, like on this example [3] ?

(You are welcome to post your answers right after each question on the space below.)


2) Space for next question

Sincerely,

Virgilio A. P. Machado

Vapmachado 18:27, 22 July 2010 (UTC)Reply

Sorry, I don't really like this interview style, it makes me feel like a student about to get outwitted by Socrates :-)
As a former ombudsman, I visit this page from time to time to help in case of problems with the understanding of the privacy policy.
If you think that the privacy policy was broken then you should contact the current Ombudsman commission.
However, your problem doesn't really seem to be related to any violations of the privacy policy (which deals mostly with private information that checkusers have). It sounds more like a problem that you have with other users of pt Wikipedia or maybe with the anonymity policies of ptwiki (which I don't know). In any case, this talk page is the wrong place to resolve these problems. A better way would be to seek conflict resolution on pt-wiki itself. Alternatively, you could probably start a RFC here. Regards, --Tinz 13:57, 26 July 2010 (UTC)Reply


Thank you so much for your suggestion, according to which this request for comment has been started and announced. As a former ombudsman you must surely know something that might help answer my question. It would be an honor if you were the first to post your comment there. Thanks for your compliment, but it is highly exaggerated. There's no comparison between Socrates and me. I believe that the Socrates you're referring to is dead :-)

Sincerely,

Virgilio A. P. Machado

Vapmachado 23:11, 26 July 2010 (UTC)Reply

Two layers of privacy

Draft amendments to the rules
The case of privacy policy has at least two 'layers' both focusing upon certain civil rights of an individual seeking to defend his anonymity.

Encouraging everybody to post, edit and discuss articles, Wikimedia (as well as thousands of other interactive facilities in the Internet) offers an option to show his authorship:

  1. as some IP which automatically appears as a 'singature' above/under/besides his message;
  2. as some pseudonym which one may choose for that purpose

Since an IP is automatically generated upon some technical data which to a certain extent may show the way to the originating computer and through this to a specific individual — the formula for the first 'layer' is ”IP vs nick”.

Since the very first days of the Internet folks preferred to identify theirselves by pseudonyms (nicks). With the further development of Internet (especially since the namespace boundaries have been overcome) people found it possible to use their actual civilian names as 'nicks'. Although it's obvious that it was their personal will to disclose their anonymity in this way (below I'll make some reservations upon that), another disputable layer of privacy appeared in the Internet communities, that is ”real” vs fictitious nick.

In addition to the explicit writing of personal data I shall mention some indirect means, as URLs and other kind of external links to the sources where their personal data is written. The netiquette explicitly treats as a gross breach when a third person discloses somebody's private information in that way. Having occured within some community (e.g. Wikipedia registered users) and its common editable workspace — it is suppressed by its in-law. However this case is too flat to deserve a thourough investigation here. I suppose that to be sufficiently covered in the existing rules of behaviour in Wikimedia.

The yawning gap in our rulings here is in unsufficient clarity and unambiguity concerning the case when somebody claims that equating his «”real” name nick» to an apparently fictitious nick is a violation of his privacy. The most recent example:

  • Arbiter 'A' creates a sockpuppet 'S' for his personal investigation purposes
  • Checkuser 'C' founds that a sockpuppet 'S' = 'A'.
  • Arbiter 'A' insists, that 'C' has infringed his privacy by revealing that 'S' = 'A', since he claims 'A' to be an abbreviation of his real name.

Let us leave aside all derivative issues that may arise in connection with the specific circumstances of this case. I shall rather insist that both this one and the series of similar disputes shall have their doubtful grounds until Wikimedia shall clearly define that

  1. Observing privacy is primarily a matter of a user. He is personally responsible for the chosen degree of similarity between his nick and his real name and other personal data.
  2. Since Wikimedia has no legal means to certify that '[User:John Johnson]' is exactly that Mr. John Johnson (age, address, driver licence…) who opened an abovenamed user account, it shall not support any claims of [User:John Johnson] of infringment against his privacy as Mr. John Johnson, in particular because
    a) it was his original will to appear in the community with a certain extent of disclosure of its personality;
    b) the opposite treatment shall discriminate the owners of a really fictitious nicks against the owners of «”real” name» nicks putting the latter in the privileged position.
  3. Identification of personalities by Wikimedia is limited within the scope of issues related to the further public interaction with users outside the virtual workspace (jobs, conferences etc.) However this data as well as technical and other evidences of identity between [User:John Johnson] and Mr. John Johnson which might have been forwarded to Wikimedia shall be ignored in all judicial and extrajudicial sues which derive from a prerequisite of identity between an individual and his nick.

Note. Clause 2-a is necessary for the case when checkusers and stewards are required to establish compliance between nicks and IP's — for example, in investigation of abuses with open proxies.

Example (has a real basis, however not investigated yet). User 'X' (assume he is unknown) enters Wikipedia aiming to set an article for deletion (AfD). Since the article is outside his 'national' workspace, he

  • sets his browser to work via a foreign open proxy server, so his AfD request is 'signed' with an IP of this proxy.
  • having suddenly found an error in his edit, he urgently switches to another browser seeking for solution. For some reason (rush, carelessness) he corrects his error from another window which is not set to an open proxy. This edit is signed with an IP originally assigned by his ISP
  • last, the AfD discussion page is 'signed' again with a faked IP (of an open proxy).

Now suppose that a checkuser establishes an identity: 'X'='Quasi Real Name'. But the underlying evidences of this output are IPs, so in the absence of ruling that the 'reality' of a nickname is a problem of an account owner, 'Quasi Real Name' shall have the grounds to counter-claim against the violation of his 'privacy'. Such lawlessness shall undermine all our further attempts to halt cross-wiki-vandalism!

* * *

I realize that a lack of knowledge of local regulations may weaken certain statements of my proposals. However the underlying problems in my examples are actual and they are awaiting their solution. Anyway I hope that the discussion of this subject shall contribute to the strengthening of the rules for all the projects of Wikimedia. Thank you in advance for the studying of this project. Cherurbino 06:48, 31 January 2011 (UTC)Reply

Typo on the foundation mirror

The last edit to this page fixed a typo in the Cookies section (back in October), but this change was never implemented on the Foundation mirror of this site. Is there anyone with Foundation access that can fix this typo (visted -> visited). We received an OTRS e-mail about this (2010010210021971). Thanks. -Andrew c 15:38, 3 January 2010 (UTC)Reply

 Fixed here. Thank you. - Rjd0060 16:22, 3 January 2010 (UTC)Reply

COPPA

This policy doesn't comply with the Children's Online Privacy Protection Act[4]. Shouldn't it say what the policy is towards children? --Aled D 15:26, 14 May 2010 (UTC)Reply

Let me quote from the article you cite:
"The Act applies to websites and online services operated for commercial purposes that are either directed to children under 13 or have actual knowledge that children under 13 are providing information online. Most recognized non-profit organizations are exempt from most of the requirements of COPPA.[1] However, the Supreme Court ruled that non-profits operated for the benefit of their members' commercial activities are subject to FTC regulation and consequently also COPPA."
Wikimedia is not commercial and not operated for the benefit of their members' commercial activities. Therefore, it seems to me that COPPA does not apply to wikimedia's projects. --Tinz 12:23, 17 May 2010 (UTC)Reply

What is being collected?

I like your privacy policy, but I have two small issues:

"When a visitor requests or reads a page, or sends email to a Wikimedia server, no more information is collected than is typically collected by web sites."

That's not really informative, unfortunately. What is a typical website these days? And what do they (i.e. you) actually collect?

Also, I didn't see any mention of search history. What is your policy with that?

I would say that only technical staff of the wikimedia foundation can answer these questions and I am not sure whether they read this page. All I can say is that the community, including trusted users in special roles like checkusers or stewards, have no access to this kind of information. --Tinz 14:29, 27 September 2010 (UTC)Reply
(This is just my personal opinion, and may not reflect reality). The average apache webserver log entry looks like:
127.0.0.1 - - [12/Nov/2010:02:25:24 -0400] "GET /w/phase3/index.php?title=Special%3ASearch&search=image%3AExample.jpg&go=Go HTTP/1.1" 200 146 "http://localhost/w/phase3/index.php/Main_Page" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.11) Gecko/2009061212 Iceweasel/3.0.6 (Debian-3.0.6-1)"

It contains the IP address, user name for HTTP authentication (mediawiki doesn't use HTTP authentication for accounts, so normally this is a - regardless of if you're logged in or not), date, the method (GET in 99% of the time), the url, HTTP protocol version (HTTP/1.1 99%) of the time, the HTTP status code (200 is the most common, meaning success. Other common codes are 404 for file not found, and 403 for forbidden), the number of bytes transferred (146 in my example), the referrer (the page where you came from to get to the page you are currently visiting), the user-agent (which web browser you're using. Usually also contains information on your operating system). This is just the "typical" example. Wikimedia servers could be configured differently (not to mention that a large portion of their logs would be squid logs not apache logs). Bawolff 22:18, 12 November 2010 (UTC)Reply

MediaWiki message

What is the MediaWiki message which should be used?

The current text suggests MediaWiki:Privacy, which was deleted as "no long required". Besides, the pages in other languages (e.g. French, Portuguese,...) suggests MediaWiki:Copyright, which is also deleted in most projects (e.g. en.wiktionary) with the same reason. Helder 12:50, 21 November 2010 (UTC)

anon/general

Is the policy sufficiently comprehensive. These seem like important questions as 200x dates start to feel like the relatively distant past. Technology continues to advance and how can we create a global environment in which a meaningful conversation is possible. 24.59.179.184 23:34, 12 January 2011 (UTC)Reply

Document structure and formatting

It seems to me that there is something wrong with the document structure and headings. "Reading projects", "Editing projects", "Discussions" are level 5 headings under one paragraph "User contributions". I guess they should be promoted to the same level as "General expectations" (level 3), since this makes little sense otherwise. I am not sure what was the original format presented to the board, however.  « Saper // @talk »  12:52, 17 January 2011 (UTC)Reply

PHPSESSID

PHPSESSID is not anormal cookie, but asession, i will ask to agnolege the user about this,.

Editing: spelling notes

General scope

There's written there: «Consistent with its Data Retention Policy, the Foundation collects and retains the least amount of personally identifiable information needed to fulfill the Projects' operational needs.»

Fulfill” is underlined red by my spell-checker.

LONGMAN Dictionary of English:

ful-fil /.../ v -ll- (also fulfill AmE) ...“ (and so on).
What standard of spelling are we to keep to?

Lincoln Josh 13:14, 4 March 2011 (UTC)Reply

Request to include the ACC Tool user privileges (access to IP and email addresses) in the privacy policy

A majority of ACC Tool users[5] are not checkusers and have not been formally identified by the Foundation. They have critical access and knowledge about the ip addresses and email addresses of users requesting new accounts at the English Wikipedia. Can we, therefore, include references to the ACC Tool in the privacy policy? (Note: We also have the Wikipedia:ACC tool users' pledge that attempts to voluntarily encourage ACC Tool users to adhere to our privacy policy).♪ ♫ Wifione ♫ ♪ 12:37, 23 March 2011 (UTC)Reply

hm, I'm not sure if I understand this ACC tool completely: These users see only the data of users who tried to create an account on the english Wikipedia, had problems (e.g. failed to decipher the captcha), and then applied for an account manually. They don't see the data of users who register the usual way, right? It surprises me that a team of ~100 users is needed for this task, maybe our captcha needs to be improved?
But it seems to me that their role is somewhat comparable to the role of the OTRS volunteer response team, so did you think of mentioning ACC in the section on OTRS of the privacy policy? --Tinz 17:48, 24 March 2011 (UTC)Reply
Hi Tinz. You are right. The ACC tool allows users to apply for an account when they're not able to decipher the captcha or when their name is perchance too similar to an existing name. The role of ACC tool users is somewhat similar to the OTRS volunteer response team, the difference being that the OTRS team is identified by the Foundation, while the ACC tool volunteers remain anonymous by choice. And yes, I wished to mention them in the OTRS section of the privacy policy. My intent is that any person reading our privacy policy gets informed that even on the ACC tool, the interface account handlers have access to ip addresses, email addresses of new account requesting users. Thanks.♪ ♫ Wifione ♫ ♪ 18:11, 24 March 2011 (UTC)Reply

Батбаатарын батням

Боржигин овогт Батбаатбрын Батням нь 1991,04,21 нд Монгол

Browsing triggers publically logged account creation - violation of privacy policy

Please see the discussion at http://en.wikisource.org/wiki/Wikisource:Scriptorium#User_talk:page_created_on_it.wikisource. Basically, when I visit a Mediawiki site for the first time, even if only to read a page, the server detects that I have a globally unified account, and creates my account on that site, and this account creation is publicly logged. This would seem to be a straight-forward violation of the privacy policy as currently worded:

"When a visitor requests or reads a page... no more information is collected than is typically collected by web sites. The Wikimedia Foundation may keep raw logs of such transactions, but these will not be published or used to track legitimate users." (my emphasis)

Hesperian 01:05, 24 June 2011 (UTC)Reply

  • When you first log in to Wikipedia make sure you uncheck the "Log me in globally" check box. That way you'll be logged only into the Wikipedia you log in to. If you leave the box checked you will create a new local account each time you visit a new wiki for the first time. Although each person gets a global account they also get local accounts at each wiki they join. Since you would have had "log me in globally" checked you created accounts every where you visited. The global account and local accounts are separate entities. Hope this helps. fr33kman 02:54, 24 June 2011 (UTC)Reply
So does the information around global login explicitly explain that that this will happen? That is to say, that when you tick this box, that an account will be created on your first visit to a site and that account names are visible to all users; typically that you will be welcomed to the site. billinghurst sDrewth 02:59, 24 June 2011 (UTC)Reply
I don't think it does. I'm not a mediawiki technical type. I suppose it's a interesting question, but wouldn't it be mostly moot since if a person has a user account they are a person likely to make an edit and hence divulge their username in any event. Still, I guess it is something for those that maintain it to answer. fr33kman 03:07, 24 June 2011 (UTC)Reply
In fact, in the name of transparency, there is an IRC channel where these "unifications" scroll by live whilst they are being made. fr33kman 03:10, 24 June 2011 (UTC)Reply
From the technical aspect, the centralauth extension automatically creates your account when you view a Wikimedia site for the first time. I would also not classify the extension's automatic actions as in violation of the privacy policy (from a practical standpoint, anyways), as the website is not collecting data from the viewer's computer, but from Wikimedia's servers, and the information that is collected is well within the "no more information is collected than is typically collected by web sites" clause. I won't get too much into that, though, as I am not a lawyer. The event is publicly logged, though it does not appear in the recent changes, and as fr33kman alluded to, the log is public for transparency. Ajraddatz (Talk) 03:49, 24 June 2011 (UTC)Reply
I've emailed the general consul with a link to this thread.  ono  05:32, 24 June 2011 (UTC)Reply
RESOLVED DUPLICATE / This bug has been marked as a duplicate of bug 19161. Cbrown1023 talk 15:47, 24 June 2011 (UTC)Reply


I'm not really happy with the response I've received here. Fr33kman assumes that I don't understand global login, and if I did I wouldn't have a problem. Fr33kman, I've been around Wikimedia projects for nearly seven years, longer indeed than the GlobalAuth extension, I know perfectly well what it does, and I don't need you to teach my grandmother to suck eggs.

Cbrown1023 makes the legitimate and interesting point that this could be used to in an exploit that extracts further information that ought to be private. But I'm not talking about this as a vulnerability that might release further information. I'm talking about the information that has already been released. The privacy policy clearly states that When a visitor requests or reads a page... the Wikimedia Foundation may keep raw logs of such transactions, but these will not be published.... Here we have a real-world non-hypothetical situation where a visitor has read a page, the fact that they did so has triggered an entry in a public log, so that they cannot deny that they have read a page on that site, and they are uncomfortable with this. Is that not a straight-forward violation of the privacy policy, already, non-withstanding any further information that might be released via an exploit?

Hesperian 02:34, 26 June 2011 (UTC)Reply

I'm sorry for being nice and trying to help, since that offends you. fr33kman 04:18, 26 June 2011 (UTC)Reply
It didn't offend me that you were "being nice and trying to help". That's twice now you've been too eager to reply, to bother to try to understand what I actually said. Hesperian 13:22, 26 June 2011 (UTC)Reply
I understand, and understood, what you were/are trying to say but since I don't know who you are I thought I'd tell you how to stop the auto creation log in case you were unaware. I can't really speak to the privacy policy since the board decided that, not the community. Perhaps asking User:Philippe (WMF) about it may help? fr33kman 18:42, 26 June 2011 (UTC)Reply
You're sending me elsewhere?? I'm pretty sure Talk:Privacy policy is the right forum for someone to raise concerns about a possible privacy policy violation. It might possibly be the wrong forum for someone who "can't really speak to the privacy policy" to nonetheless expound on unrelated matters. Hesperian 04:29, 27 June 2011 (UTC)Reply
While it doesn't bother me that my reading of various wikis has been logged, I can see how it could be a big problem to some people, and it looks to me like it still happens. WereSpielChequers 23:11, 29 September 2011 (UTC)Reply

IRC

The bit about IRC probably needs updating to reflect the fact that there are now official WMF office hours on IRC. WereSpielChequers 12:53, 27 November 2011 (UTC)Reply

Watchlists and preferences

There's quite a bit of "private" information that some users accumulate here, especially in things like their watchlists. Some of this information is then collected and used in an aggregated way, for example unwatched pages are available to trusted editors but we try not to release them to vandals. I think the Privacy policy should cover this - at present I think it insufficiently covers reality. WereSpielChequers 13:06, 27 November 2011 (UTC)Reply

Meetups

One area which has grown has been meetups, and these especially the residential ones do tend to require disclosure of real names. I would suggest that the Privacy policy should cover this WereSpielChequers 13:06, 27 November 2011 (UTC)Reply

Identification to the office

Certain tools such as Oversight and checkuser are only available to editors who have identified to the Office. I would suggest that this policy should cover that process and in the process disclose whether the identity information is held and if so how long for. WereSpielChequers 13:14, 27 November 2011 (UTC)Reply

IP information stored.. how long?

Hi... Sorry if this should be placed elsewhere... The Privacy Policy states that, "When a page is edited by a logged-in editor, the server confidentially stores related IP information for a limited period of time. This information is automatically deleted after a set period. " Can you tell me how long the "limited period of time" / "set period" is? Thanks! Wikipelli (talk) 15:41, 4 March 2012 (UTC)Reply

The previous privacy policy stated "the raw log data is not made public, and is normally discarded after about two weeks." Presumably, this is no longer the case? I am a bit unsure, but the new policy seems to say the following about IP address retention:
  • Editors who are not logged inn: IP addresses are retained indefinitely and published.
  • Readers: IP addresses may be retained indefinitely (in server logs) but not published.
  • Editors who are logged in: IP addresses are are retained for a limited but unspecified period of time, and not published.
I find it a bit peculiar that readers have less privacy than (registered) editors. Besides, even Google hashes IP addresses after a specified period of time (and one would think Wikipedia searches is no less sensitive than Google searches). 62.212.73.103 21:06, 6 April 2012 (UTC)Reply

Cookie expiry

"If one saves a user name or password in one's browser, that information will be saved for up to 30 days, and this information will be resent to the server on every visit to the same Project." This sentence is incorrect now that the expiry has been changed to 180 days as part of the MediaWiki 1.19 deployment. PleaseStand (talk) 21:42, 6 March 2012 (UTC)Reply

Privacy policy violation in si.wikipedia

Please See this discussion on sinhala language wikipedia. Our active user community is small. Please comment & advice. Singhalawap (talk) 15:56, 28 March 2012 (UTC)Reply