Page MenuHomePhabricator

Welcome survey: The link under "we value your privacy" is outdated
Closed, ResolvedPublic

Description

The Welcome survey (enwiki example) includes a "we value your privacy" box, which includes a link to a place where the user can learn more about how Welcome survey data is processed:

Screenshot 2023-08-07 at 10.22.04.png (904×2 px, 230 KB)

Currently, this link leads to https://meta.wikimedia.org/wiki/Data_retention_guidelines#Exceptions_to_these_guidelines, which only says "This was moved to the Governance wiki" (aka to https://foundation.wikimedia.org/wiki/Legal:Data_retention_guidelines#Exceptions_to_these_guidelines). The link previously lead to https://foundation.wikimedia.org/wiki/Legal:New_User_Welcome_Survey_Privacy_Statement, and it was changed to the current one as part of T252572: Scale: update survey privacy link.

Unfortunately, even on the Governance wiki, I can't find any information regarding the Welcome survey. This probably happened, because Growth-Team used to have a data retention exception (that allowed us to store user data for more than 90 days) in the past. The exemption was revoked as part of T235577 and related tasks (see links from the linked one), as the need for having it was no longer present. Consequently, the list of data retention exemption provides no information about Growth's work at this point.

We need to:

  • Figure out where the link should go to now (do we have/should we have a dedicated privacy page for the project? or is that no longer necessary, given there is no exception in place anymore?). This should be probably checked with WMF-Legal.
  • Update the link in server configuration (changing WelcomeSurveyPrivacyPolicyUrl in extension.json to point to the new URL should be fine).
  • Update copy (WMF legal has recommended the copy below)

Old copy:

We value your privacy
The Wikimedia Foundation will use your answers to help you start editing Wikipedia. Learn more about data on new editors.

New copy and link approved by WMF legal:

We value your privacy
Learn more about our privacy practices

Acceptance Criteria:

Event Timeline

Restricted Application added a subscriber: Aklapper. · View Herald Transcript

I've contacted Legal via the Survey privacy statement request form. I'll post an update once I have more info.

I've updated the task to include the recommendation from legal. Please let me know if anything isn't clear,

Thanks for the info and for handling this with Legal @KStoller-WMF! I see a link to the privacy statement in the "Old copy" section, which actually is not currently linked from the Welcome survey as of today. In the "New copy" section, there's only a link to the Privacy policy, not to the privacy statement. Does that mean we should shorten the copy and only link the Privacy policy (even though the privacy statement was recently updated by Legal)? Or should we include both links in some way? I'm primarily confused by the fact that Legal updated the privacy statement few days back (Aug 15), but a link to it is not included in the new copy recommendation.

If we're to link the privacy statement, I also noticed the privacy statement mentions we're using QuickSurveys to collect data. That's actually not true -- Welcome survey was fully engineered by Growth, and it doesn't depend on (or make use of) QuickSurveys at all. I think that either the extension page or Welcome survey project page should probably be linked. Of course, if the statement's not meant to be linked, it probably doesn't matter much, but I wanted to highlight this anyway.

@Urbanecm_WMF sorry for the confusion, I was perhaps trying to do too much multitasking on too little sleep at Wikimania.

Basically Legal has asked for two changes:

  1. From within the welcome-survey-form, we should link to the New User Welcome Survey Privacy Statement, before the Finish button. But I'll add those details to T342353. (And sounds like I better follow up with Legal about the QuickSurvey language).
  1. Since we will now link to the privacy statement from within welcome-survey-form, we don't also need that link added to the welcomesurvey-sidebar-section. Legal recommended we simplify the language to simply be:

We value your privacy
Learn more about our privacy practices.

But since we will provide a permanent link to the the New User Welcome Survey Privacy Statement from within the welcome-survey-form and there is already a link to the general Privacy policy in the footer, I'm wondering if Legal would instead be OK with us simply removing the "We value your privacy" section in the welcomesurvey-sidebar-section.

I'll try to sort this out with Legal and clarify in this task, and I will also add further details to T342353. Sorry again for causing confusion!

Change 951905 had a related patch set uploaded (by Urbanecm; author: Urbanecm):

[mediawiki/extensions/GrowthExperiments@master] WelcomeSurvey: Do not pass privacy policy link to confirmation message

https://gerrit.wikimedia.org/r/951905

Change 951906 had a related patch set uploaded (by Urbanecm; author: Urbanecm):

[mediawiki/extensions/GrowthExperiments@master] WelcomeSurvey: Update privacy links

https://gerrit.wikimedia.org/r/951906

Test wiki created on Patch demo by Martin Urbanec (WMF) using patch(es) linked to this task:
https://patchdemo.wmflabs.org/wikis/55db8e2d0a/w

Thanks for the clarification @KStoller-WMF, that makes sense. I think it is better to centralize the privacy statement discussion here, with T342353 in mind. I think I understand the goal to implement now, thanks to the prior conversation with Legal (thanks!). I uploaded patches to implement the requested changes. Here is a screenshot of the Welcome survey from my local development wiki:

image.png (1×2 px, 263 KB)

The link in the footer goes to https://foundation.wikimedia.org/wiki/Special:Mylanguage/Legal:New_User_Welcome_Survey_Privacy_Statement; the link in the sidebar goes to https://foundation.wikimedia.org/wiki/Special:MyLanguage/Policy:Privacy_policy.

I also created a Patch Demo to make it possible for you/Legal to check how the Welcome survey would work after the changes. You can try it out by going to https://patchdemo.wmflabs.org/wikis/55db8e2d0a/wiki/Special:WelcomeSurvey (username: Patch Demo, password: patchdemo1).

We can fully remove the sidebar if Legal agrees with that. Please let me know if it is okay to merge the changes as depicted in the screenshot and in the Patch Demo wiki, or if we need to make any changes.

For the record, this is how Welcome survey would look like with the T342353 checkbox enabled (both privacy statements are linked).

Screenshot 2023-08-23 at 13.55.23.png (1×1 px, 194 KB)

I'm not sure if we need to have the secondary text (The Wikimedia Foundation will use your answers...) when the opt in checkbox and associated link to the same privacy statement is displayed. But let's let legal review and make that call before we merge. Thanks!

Aklapper added a subscriber: Nathjuhh.

Change 951905 abandoned by Urbanecm:

[mediawiki/extensions/GrowthExperiments@master] WelcomeSurvey: Do not pass privacy policy link to confirmation message

Reason:

squashed into the other patch

https://gerrit.wikimedia.org/r/951905

Change 952347 had a related patch set uploaded (by Urbanecm; author: Urbanecm):

[mediawiki/extensions/GrowthExperiments@master] Welcome survey: Add generic user-research question

https://gerrit.wikimedia.org/r/952347

Based on follow-up conversation with WMF-Legal, I've updated the Welcome survey to meet the final requirements. This is the normal survey (with no user research question):

image.png (1×2 px, 245 KB)

This is how it looks like with the T342353 checkbox enabled:

image.png (1×2 px, 280 KB)

With Legal's blessing, this is now ready for Code Review.

Change 951906 merged by jenkins-bot:

[mediawiki/extensions/GrowthExperiments@master] WelcomeSurvey: Update privacy links

https://gerrit.wikimedia.org/r/951906

Change 952347 merged by jenkins-bot:

[mediawiki/extensions/GrowthExperiments@master] Welcome survey: Add generic user-research question

https://gerrit.wikimedia.org/r/952347

Etonkovidova added a subscriber: Etonkovidova.

Based on follow-up conversation with WMF-Legal, I've updated the Welcome survey to meet the final requirements. This is the normal survey (with no user research question):

image.png (1×2 px, 245 KB)

Checked in wmf.26 - all looks as expected; the link Learn more in our privacy statement goes to https://foundation.wikimedia.org/wiki/Legal:New_User_Welcome_Survey_Privacy_Statement:

Screen Shot 2023-09-18 at 4.51.02 PM.png (1×3 px, 289 KB)