Privacy/HowTo/WebReg

Online Data Collection

At Mozilla, six core privacy principles guide our data practices and operations. The Mozilla privacy team works to build a consistent approach to privacy that puts users in control. This page is designed to help you apply the principles to collecting user data online through web registrations, such as newsletter sign-ups.

Privacy Review Required

You will need to file a bug for a privacy review of your data collection page.

• Product: Legal;
• Component: Privacy or EULA

Newsletter sign ups

Simply entering an email address is not an opt-in. Checkboxes are required. You will need permission to send an email newsletter, plus an acknowledgement of the Mozilla privacy policy. This can be accomplished in a couple different ways:

1) If the sole purpose of the activity is a newsletter sign up, you may combine the opt-in and the privacy policy acknowledgement into a single checkbox.

• ___ I want to receive email updates from Mozilla about projects and campaigns like this, and I’m okay with you handling this info as you explain in your privacy page.

2) If the user can participate without opting in to the newsletter, you will need two checkboxes.

• ___ I want to receive email updates from Mozilla about projects and campaigns like this.
• ___ I’m okay with you handling this info as you explain in your privacy page.

3) You may combine an opt-in to two different publications, where you do not have the ability to offer separate unsubcribes/opt-outs. However, an unsubscribe/opt-out must cancel both. (You can also combine it as described in #1 above.)

• ___ I want to receive email updates about Ignite and Mozilla, and I'm okay with you handling this information as you explain in your privacy policy.

4) You may combine acknowledgement of the privacy policy and terms of service.

• ___ I agree to the Firefox Affiliates terms of service and Mozilla Privacy Policy.

Acceptable Checkbox Wording

The goal of the wording is to provide enough information so users know what they're opting in to, but make it broad enough so that it's practical. (For example, if you decide you want to send them a survey in the future, is your opt-in broad enough to cover that?)

• ___ I want to receive email updates from Mozilla about projects and campaigns like this.
• ___ I wish to receive information about Firefox and Mozilla via email.

Additional Wording

If you have space on the page, or can include a "What's this?" or "More info" type link, it's nice to further clarify what users can expect by checking the box, for example:

By signing up, you'll receive information about how to help with our world-changing projects and ways to help engage with the Mozilla project and build a better web.

Words to Avoid

• Don't include the word "notifications". Administrative messages do not require an opt-in.

Mechanics

• Checkboxes must be unchecked.
• Failing to check the privacy policy acknowledgement, must create a fail. (i.e. * as a required field)
• The words "Privacy Policy" should hyperlink to the appropriate privacy policy, which is usually the Mozilla Privacy Policy (http://www.mozilla.org/about/policies/privacy-policy.html)