Thought this was interesting and worth knowing about

  • Zerush@lemmy.ml
    link
    fedilink
    arrow-up
    3
    ·
    edit-2
    4 days ago

    Thunderbird May Disclose Information To: Mozilla Affiliates: Thunderbird is a project of MZLA Technologies Corporation, a subsidiary of Mozilla Foundation and an affiliate of Mozilla Corporation, and as such, shares some of the same infrastructure. This means that, from time to time, your data (e.g., crash reports, and technical and interaction data) may be** disclosed to Mozilla Corporation and Mozilla Foundation**. If so, it will be maintained in accordance with the commitments we make in this Privacy Notice.

    DNS servers, Standard Autoconfiguration URIs, and Mozilla’s Configuration Database: To simplify the email set-up process, Thunderbird tries to determine the correct settings for your account by contacting Mozilla’s configuration database as well as external servers. These include DNS servers and standard autoconfiguration URIs. During this process, your email domain may be sent to Mozilla’s configuration database, and your email address may be disclosed to your network administrators.

    Amazon Web Services: Thunderbird uses Amazon Web Services (AWS) to host its servers and as a content delivery network. Your device’s IP address is collected as part of AWS’s server logs.

    Email address providers (Desktop Only Legacy): Prior to version 128, Thunderbird partnered with Gandi.net and Mailfence to allow you to create a new email address through Thunderbird. If you choose to use this feature, your email address search terms are sent to Gandi.net and Mailfence to return available addresses. In addition, your country location is also shared to provide the correct prices. You can learn more about Gandi.net’s and Mailfence’s data practices by reading their privacy notices.

    Always good to read TOS and PP of an service.

    • The Octonaut@mander.xyz
      link
      fedilink
      arrow-up
      2
      ·
      4 days ago

      I’m always confused when people are surprised by something like an account sync meaning that the operators have to store your data

      Makes me wonder if they understand how Lemmy works…

      • Zerush@lemmy.ml
        link
        fedilink
        arrow-up
        2
        ·
        3 days ago

        Yes, naturally to create an account for Sync, they have to store your data. But it’s not the same if they also share these with third parties.

        • The Octonaut@mander.xyz
          link
          fedilink
          arrow-up
          1
          ·
          3 days ago

          If third parties means AWS, then every website you’ve accessed this year shares your data with third parties. This is why the GDPR exists.

          • Legume5534@lemm.ee
            link
            fedilink
            English
            arrow-up
            1
            ·
            3 days ago

            Depends. Every hostname accessed? Sure. Every full URL? Not with https being everywhere these days.

          • Zerush@lemmy.ml
            link
            fedilink
            arrow-up
            1
            arrow-down
            1
            ·
            edit-2
            2 days ago

            Yes, but this is a different thing. It’s clear that you are not private, even using TOR, if you use Google for search, post on Fakebook or use another page/service which logs and profile your activity, but it’s different if the browser itself or/and its company is tracking you, sharing it with third parties. That is the point. GDPR limit this to an minimum, but don’t avoid it completely. More than ever is important that you ALWAYS read TOS and PP of every app/service before using it. A good rule is: longer and more written in a legal jargon, difficult to understand and many external links, it is a sign that the app or service is trying to hide its activities and dark patterns by boring the user. A honest app/service don’t need this tricks, using a short and clear text.

              • Zerush@lemmy.ml
                link
                fedilink
                arrow-up
                1
                ·
                2 days ago

                That of Mozilla is enough clear, although not much better with several external links that must be checked separately. But in general it is a fairly valid rule that the site has things to hide if it puts a very long legal text. A normal user does not bother to read a text of 2 or more pages in a difficulty legal jargon.

                Honest sides don’t need to do it, good examples are the PPs of the SSuite (the shortest ever) or Andisearch, which are between the bests I know.