Removing MediaWiki-extensions-Gadgets as this is not about the PHP extension with that name.

Are gadgets expected to fall under the standard Wikimedia privacy policy? I'm not seeing any specific privacy policy just for them, nor am I seeing any exceptional language for them within the standard privacy policy. Though gadgets are fairly similar to user scripts, which often call external resources, and which will indeed break once CSP is set to enforce (whenever that may be.)

Hmm, I had heard about those, but assumed they were properly setup for privacy. Sigh.
@TheDJ a while ago you working on a related script for this, which would obviously (!) have respected privacy. Maybe you could help advise on a replacement, for these other wikis?

In T230124#5402604, @sbassett wrote:

Are gadgets expected to fall under the standard Wikimedia privacy policy? I'm not seeing any specific privacy policy just for them, nor am I seeing any exceptional language for them within the standard privacy policy.

Gadgets are executed in the context of a user's session with all the privileges that implies, I would expect it would fall within the same privacy policy as any MediaWiki-and-extensions-provided JavaScript.

In T230124#5402604, @sbassett wrote:

Are gadgets expected to fall under the standard Wikimedia privacy policy? I'm not seeing any specific privacy policy just for them, nor am I seeing any exceptional language for them within the standard privacy policy. Though gadgets are fairly similar to user scripts, which often call external resources, and which will indeed break once CSP is set to enforce (whenever that may be.)

Not on secteam anymore, but just to give some historical context about how this sort of thing used to be treated- traditionally this sort of thing was considered a big no no if the gadget was default enabled or didnt disclose what was going on. If the gadget informed the user that information was going to a third party and the user had to opt in to use it (as is the case on ru wikipedia, although i didnt check the others) this was considered a grey area. Afaik this was never officially blessed as being ok, but de-facto was considered ok, or at least we turned a blind eye to it.

As for csp - this sort of usecase was one of the reasons why it was planned to allow users to add things to their allow list - to be able to use gadgets to create mash ups from other sites (although there was some debate whether to include scripts in user control allow list). Anyhow im not working on this anymore so up to whomever takes it over for what actually happens, just wanted to provide some background on the thinking at the time

I used to have a sharebox.js userscript yes, and it showed a disclaimer on its documentation page..
https://web.archive.org/web/20190410075542/https://en.wikipedia.org/wiki/User:TheDJ/Sharebox

it has been deleted for years however.
Something like
https://en.wikipedia.org/wiki/Wikipedia:Wikipedia_Signpost/Templates/Signpost-article-header-v2
That is a much less privacy invasive approach (but also has less features).

In T230124#5404173, @Bawolff wrote:

If the gadget informed the user that information was going to a third party and the user had to opt in to use it (as is the case on ru wikipedia, although i didnt check the others) this was considered a grey area. Afaik this was never officially blessed as being ok, but de-facto was considered ok, or at least we turned a blind eye to it.

I added the warnings in 2017 for both gadgets (addThisArticles, addThisMain) because I considered them problematic, but couldn’t outright remove them since like 1,000 users had them enabled. We had a plan to provide an alternative with privacy in mind, but no one had time to write new scripts. I’m pretty sure other wikis with gadgets in the same name don’t have those warnings, unless the gadgets were imported from Russian Wikipedia after 2017.

AddThis has been dead for 6 months. Any gadgets, if they still exist, can just be disabled.

Removed from all the Gadgets-definition pages:

Wiki	Page title	Excerpt
ce.wikipedia	MediaWiki:Gadgets-definition	popups[ResourceLoader]|popups.js * addThisArticles[ResourceLoader|type=general|dependencies=mediawiki.util]|addThisArticles.js|addThisArticles.css *
kk.wikipedia	МедиаУики:Gadgets-definition	GoogleTrans[ResourceLoader]|GoogleTrans.js * addThisArticles[ResourceLoader|dependencies=mediawiki.util]|addThisArticles.js|addThisArticles.css == default == *
ru.wikisource	MediaWiki:Gadgets-definition	FlaggedRevs[ResourceLoader]|FlaggedRevs.css * addThisArticles[ResourceLoader|dependencies=mediawiki.util]|addThisArticles.js|addThisArticles.css *
tg.wikipedia	Медиавики:Gadgets-definition	popups[ResourceLoader]|popups.js * addThisArticles[ResourceLoader|type=general|dependencies=mediawiki.util]|addThisArticles.js|addThisArticles.css * HideInfobox|HideInfobox
tt.wikipedia	МедиаВики:Gadgets-definition	util]|Highlightredirects.js * addThisArticles[ResourceLoader|dependencies=mediawiki.util]|addThisArticles.js|addThisArticles.css == users == *
udm.wikipedia	MediaWiki:Gadgets-definition	popups[ResourceLoader]|popups.js * addThisArticles[ResourceLoader|type=general|dependencies=mediawiki.util]|addThisArticles.js|addThisArticles.css == users ==
vec.wikipedia	MediaWiki:Gadgets-definition	js * addThisArticles[ResourceLoader|type=general|dependencies=mediawiki.util]|addThisArticles.js|addThisArticles.css * addThis

(you put the wrong link to T349622 in the comment but ultimately it doesn’t matter much; please don’t fix it for ruwiki as I already have requested the deletion of all addthis-related pages)

In T230124#9280933, @stjn wrote:

(you put the wrong link to T349622 in the comment but ultimately it doesn’t matter much; please don’t fix it for ruwiki as I already have requested the deletion of all addthis-related pages)

!!