Is Extension:Petition already deployed on any other Wikimedia site?
Asking as https://www.mediawiki.org/wiki/Review_queue#Checklist might apply.

on testwiki and foundationwiki I think?

Yes, confirmed at foundationwiki: https://wikimediafoundation.org/wiki/Special:Version

According the documentation:

Petition signatures (time and username/IP address) are logged in a private log, only visible to users with the view-petition-data right. There is also integration with Extension:CheckUser if it is installed on the wiki.

How exactly the IP collection by a Wikimedia Sverige representative will play with the privacy policy?

Could we suggest to customize petition-form-privacy message to add something like "By derogation with the Wikimedia Foundation privacy policy, your public IP address and other petition information will be communicated to Wikimedia Sverige in the goal to ensure the quality of the signature collection process."?

Another solution could be we let a steward collect the final batch of signature and send them without the IPs to the chapter.

We are not interested in IP or Username.

If we could just get the four fields Name, Email address, Country, and Personal Message if the check box is ticked (like here: https://wikimediafoundation.org/wiki/Special:Petition ) that would be fulfilling all our needs.

A legal advice would be welcome here on the compatibility of the Petition extension and the privacy policy.

Wondering if WMF-Legal could provide such advice? @Slaporte?

There is no issue under the Privacy Policy with deploying the extension.

@Ainali, Wikimedia Sverige will need to make sure the disclaimer language above the "Sign" button is complete and accurate.

@Slaporte If I understand it correctly we need to make a local message at MediaWiki:Petition-form-privacy to do that. We'll get right to that as soon as the extension is enabled.

@Slaporte did you take in account in your assesment the public IP address of the signatory will be transferred from WMF to Wikimedia Sverige?

In T115906#2076726, @Dereckson wrote:

@Slaporte did you take in account in your assesment the public IP address of the signatory will be transferred from WMF to Wikimedia Sverige?

@Slaporte / @ZhouZ: Could you answer the last question if possible? Thanks in advance!

In T115906#2242143, @Aklapper wrote:

In T115906#2076726, @Dereckson wrote:

@Slaporte did you take in account in your assesment the public IP address of the signatory will be transferred from WMF to Wikimedia Sverige?

@Slaporte / @ZhouZ: Could you answer the last question if possible? Thanks in advance!

If users will share their email address with Wikimedia Sverige, then that should be in the privacy statement before users click "Sign".

I spoke with @csteip about IP addresses. My understanding is that IPs are recorded in checkuser, and then available to users with checkuser rights like other contributions. This is consistent with our privacy policy and not an issue. If Wikimedia Sverige would prefer to have less data, then we should disable the checkuser feature in the petition extension.

Good, thanks for feedback.

@Ainali Please confirm you still need the extension.

If so, I'll schedule it for deployment this Monday.

On wiki localisation

The following strings must be customized to add specific WMSE stuff so:

• petition-data-intro, for the staff with the right to view the data
• petition-form-privacy, for the signatories

Right to download the petition data

We also need to add the view-petition-data right to those with the right to download the CSV with petition results.

Do you want a new user group Petitions manager, or do you want I add this right to sysops?

@Ainali : Could you reply to the last comment please?

Oh, sorry for late response. I am not in the office of WMSE anymore, but perhaps @Lokal_Profil , @Jopparn or @annatroberg can answer this?

In T115906#2371644, @Ainali wrote:

Oh, sorry for late response. I am not in the office of WMSE anymore, but perhaps @Lokal_Profil , @Jopparn or @annatroberg can answer this?

Re-ping : Please confirm you still need the extension.

Sorry for the very delayed response. Yes we are still interested (we might actually want to run a petition in the coming months).

Could we have a new user group Petition managers to whom the view-petition-data right is tied?

Once the extension is live I'll create the [[ https://se.wikimedia.org/wiki/MediaWiki:petition-data-intro | petition-data-intro ]] and [[ https://se.wikimedia.org/wiki/MediaWiki:petition-form-privacy | petition-form-privacy ]] interface messages.

One question (with GDPR around he corner): If requested how easy would it be to delete either a single entry/signature or the data for a whole petition?