Adds initial version of Privacy Policy #6570
Conversation
Why: To inform users what information is collected and who has access to it. Note: This is in the `hubs` repo, so it can be customized by forked clients.
DougReeder
force-pushed
the
privacy-policy
branch
from
40c0536 to
b3db93a
Compare
| **Administrator**: [Does this need to be defined separately???] | ||
|
|
||
| **Hubs Foundation**: 16009034 CANADA FOUNDATION, a Canadian Not-for-profit corporation | ||
|
|
There was a problem hiding this comment.
| **Hubs**: Duck-themed multi-user virtual spaces in WebVR. Within this policy, "Hubs" refers to the software or a Hubs software installation/Hubs instance belonging to a Hubs instance owner. |
I'm trying to clarify the difference between Hubs -- as was a common name for what the experience is/was and Hubs Foundation.
| **Photos and Videos You Take, and Photos, Videos, and Objects You Upload**: If you take photos and video in a Hubs room or upload photos, videos, or objects to a room, Hubs stores them so you can share them within the room. | ||
| They are deleted within 72 hours unless you pin them. | ||
| If you pin them they will be stored until you remove them from the room, and they will be viewable by anyone who can access the room. | ||
|
|
There was a problem hiding this comment.
| **Device type**: When you are in a Hubs room, the People tab displays an icon indicating your device type. Icons include phone, tablet, desktop, or VR headset. Hubs does not store this information but it does display the icons in the People tab to others in the room . If a user has the "Show RTC Panel" on in Preferences, they can see |
Fact check my "Hubs does not store this information"
I struggled to find the details on the icons and guessed on the types after searching GitHub for "device". Also, I don't know how to describe what the RTC Panel shows for a user.
| If you’re logged in to your account, Hubs will store your avatar. | ||
| If you’re not logged into your account, Hubs will not store your avatar. | ||
|
|
||
| **Voice data**: If your microphone is on, Hubs sends the audio to other users in the room, including users in the lobby. |
There was a problem hiding this comment.
| **Voice data**: If your microphone is on, Hubs sends the audio to other users in the room, including users in the lobby. | |
| **Voice data**: If your microphone is on, Hubs sends the audio to other users in the room, including users in the lobby. When sound is broadcast from your avatar, others in the room may see your name tag change color. |
|
|
||
| **Scenes and avatars you create**: Hubs stores scenes and avatars that users create so Hubs can display them. | ||
|
|
||
| **Attribution information**: When someone publishes a scene or avatar to Hubs, they have the option to “Allow Remixing with Creative Commons CC-BY 3.0” or allow promotion of your scene or avatar. If the user chooses one or both of these options, Hubs will share the scene or avatar and attribution information publicly. |
There was a problem hiding this comment.
We need clarification on this phrase "When someone publishes a scene or avatar to Hubs,"
This wording was fine when everything was Mozilla and folks used the demo instances and thought of them as "Hubs". But now, this phrase doesn't quite fit. Random people can't publish a scene to the Hubs Foundation (we have security guardrails in place to prevent that, right?) and we'll set up a content donation pipeline (in the works).
So perhaps this needs to be along the lines of:
When someone publishes a scene or avatar on a Hubs instance, they have the option to "Allow Remixing with Creative Commons CC-BY 3.0" or allow promotion of the scene or avatar by the Hubs instance owner"
Then delete the next sentence.
Thoughts?
|
|
||
| **Technical data**: Hubs receives data about the type of devices used to interact with Hubs, as well as their operating systems, languages, the names and versions of browsers, and other data needed to load and operate a room. | ||
|
|
||
| **Interaction data**: Hubs received data about interactions with Hubs, such as the number of rooms created, messages sent through or to third-party services like Discord (including aggregated counts such as the number of messages and users who have joined relevant channels), the number of users in a particular room, the start and end time of users’ interactions with Hubs, the amount of time users interact with Hubs in immersive sessions, and the first time in a particular month or day that a user begins to use Hubs. |
There was a problem hiding this comment.
"Hubs received data about interactions in Hubs"-- this is an example of where it is not clear if Hubs means any Hubs instance or if Hubs meant Mozilla.
| **Technical data**: Hubs receives data about the type of devices used to interact with Hubs, as well as their operating systems, languages, the names and versions of browsers, and other data needed to load and operate a room. | ||
|
|
||
| **Interaction data**: Hubs received data about interactions with Hubs, such as the number of rooms created, messages sent through or to third-party services like Discord (including aggregated counts such as the number of messages and users who have joined relevant channels), the number of users in a particular room, the start and end time of users’ interactions with Hubs, the amount of time users interact with Hubs in immersive sessions, and the first time in a particular month or day that a user begins to use Hubs. | ||
|
|
There was a problem hiding this comment.
Privacy conscious users will spot the Hubs instance cookie so I do feel that it must be addressed here (possibly this section but it could be anywhere in this Privacy Policy).
|
|
||
| **Interaction data**: Hubs received data about interactions with Hubs, such as the number of rooms created, messages sent through or to third-party services like Discord (including aggregated counts such as the number of messages and users who have joined relevant channels), the number of users in a particular room, the start and end time of users’ interactions with Hubs, the amount of time users interact with Hubs in immersive sessions, and the first time in a particular month or day that a user begins to use Hubs. | ||
|
|
||
| **Error Data**: When the Hubs client crashes or fails, Hubs receives error messages which may include the room URL, response time for requests, the page a user was on when the error happened, the user’s operating system, browser information, and IP address. |
There was a problem hiding this comment.
"Hubs receives error messages" - another example of clarification needed. Who's Hubs?
|
|
||
| ## Who Hubs May Disclose Information To | ||
|
|
||
| **The Hubs Host**: When you use a Hubs instance, Hubs shares information with the Hubs subscriber who created the Hubs instance. This includes your username, information about your account and when you created it, as well as scenes, avatars, and other content you add to a Hubs room. |
There was a problem hiding this comment.
Is this whole section true? I suppose it is via the Admin Panel??
| **Discord**: If a room you are in is connected to Discord, Hubs store access tokens and the server and channel IDs that have been connected. | ||
| Hubs will synchronize chat messages, room changes, 2D and 3D objects you create, and whether you join or leave with the connected Discord channel. | ||
| Hubs does not log any synchronized messages. | ||
| You can see Discord’s Privacy Policy for more information. |
There was a problem hiding this comment.
| You can see Discord’s Privacy Policy for more information. | |
| You can see [Discord’s Privacy Policy](https://discord.com/privacy/) for more information. |
| ## Information received by other parties | ||
|
|
||
| Hubs uses Google Fonts, so Google receives your IP address, the requested URL, and HTTP headers, including the user agent and referrer. | ||
| This data is collected to respond to user requests and for security purposes, but Google does not currently use it to create user profiles or for targeted advertising. |
There was a problem hiding this comment.
Fact checked. Still true. I've heard similar language from internet security experts. It's a sort-of 'we wish we didn't use Google ecosystem stuff, but it's mostly OK' tone.
|
|
||
| If you have any other questions regarding personal data or privacy practices, please contact the Site Owner. | ||
|
|
||
| Please visit [the forums](https://discord.com/channels/1302953641115783198/1314206482438553631) for general support help. |
There was a problem hiding this comment.
| Please visit [the forums](https://discord.com/channels/1302953641115783198/1314206482438553631) for general support help. | |
| Please visit the [Hubs Foundation Discord](https://discord.gg/hubs-498741086295031808) for support. |
That is a dead link and we don't use the word "forums" much now.
|
|
||
| ## Other Information You Should Know | ||
|
|
||
| If you have any other questions regarding personal data or privacy practices, please contact the Site Owner. |
There was a problem hiding this comment.
Clarify "Site Owner". Hubs instance owner? We should pick one phrase and check this entire policy for consistency.
|
I made many comments @DougReeder but as I mentioned to you verbally, this draft partially reflects an age in the past. So many folks, I think, associated the Mozilla demo instance with the word "Hubs" that it made sense when it was written for Hubs to basically refer to an internet thing that people just went to, but now I think we have to be extra careful to separate Hubs software from Hubs instance from Hubs instance owner from Hubs Foundation. Whew! I'm not worried though because I'm sure my comments will get a good review going. ;) Thank you very much for getting this started! |
2 participants
What?
Adds initial version of Privacy Policy
Why?
To inform users what information is collected and who has access to it.
Limitations
Does not cover Spoke
Alternatives considered
This is in the
hubsrepo, so it can be customized by forked clients.Open questions
Additional details or related context
Supersedes Hubs-Foundation/policies-procedures-guidelines-public#20