Add legal commentary, and terms of service.

chrome/content/accountProvisioner.html

@@ -98,7 +98,18 @@
     <div class="header">
       <h2>First lets create a new e-mail address <a class="optional">(optional*)</a></h2>
       <div class="description">
-        Through Hover.com Thunderbird can offer you a new personalized, private, and secure email account. Just fill in your first and last name in the section below to get started.
+        Through Hover.com Thunderbird can offer you a new personalized,
+        private, and secure email account. Just fill in your first and last
+        name, or any other words you’d like, in the section below to get
+        started.
+        <span class="commentary">
+          The words you enter here will be sent to Mozilla Messaging (<a
+          href="https://www.mozillamessaging.com/en-US/about/privacy-policy/"
+          class="external">Privacy Policy</a>) and to 3rd party
+          email provider Hover (a Tucows service, <a href="" class="privacy
+          external">Privacy Policy</a>) so that Hover can search for
+          available email addresses.
+        </span>
       </div>
     </div>
 
@@ -148,8 +159,8 @@
 
     <div id="existing">
       <div style="width:100%;" class="hbox">
-        <div class="message boxFlex external">
-          You can also check out some <a
+        <div class="message boxFlex">
+          You can also check out some <a class="external"
           href="http://momo.last-chance.net/en-US/thunderbird/features/email_providers.html"
           >free email account alternatives</a>.
         </div>
@@ -164,14 +175,28 @@
   <div id="chosen_email"></div>
   <table id="provision_form">
     <tr><td><span>Terms of Service:</span></td>
-        <td>
- <textarea rows="5" cols="80" style="width:100%;text-align:" readonly="readonly" onfocus="this.rows=10">Terms of Service</textarea>
-      <span class="error"/></td></tr>
+      <td><textarea rows="5" cols="80" style="width:100%;text-align:"
+                    readonly="readonly" onfocus="this.rows=10">
+The Thunderbird Account provisioner service is provided in part by third-party-service providers (listed at the bottom of this document). This document describes what user data goes to Mozilla and the third party, and Mozilla's commitments regarding that data.
+
+This feature remains inoperative until a user chooses to configure a new email account, and then opts in to checking for potential partner accounts by clicking the search button on the "New Mail Account" dialog.  That dialog asks for the user's full name (or other words the user chooses), in order to find an available email address.
+
+The values the user enters are then sent over secure channels to a Mozilla server, and from there to the third-party email service providers indicated by the user. These third-party service providers return one or more email addresses, and Thunderbird offers to set up one of these accounts on behalf of the user. The email addresses will be retained by Mozilla for 10 days for debugging purposes only.
+
+If the user chooses to create this account, Thunderbird will request various pieces of information specified by the account provider, possibly including, but not limited to, full name, proposed password, credit card type and number, and address. Terms of Service text, supplied by the provider, will be displayed as part of this form, as well as text that currently reads:
+
+By clicking on 'I accept' below you are agreeing to the Terms of Service above and the third-party's Terms of Service and Privacy Policy.'
+
+If the user clicks "I accept", the account credentials are transmitted through a secure connection directly to the user-selected partner. The credit card information, password and security question and answer are not transmitted to the Mozilla server.
+
+If the account can be provisioned, the service provider then returns configuration data which the Account Provisioner uses to configure Thunderbird to be able to login to the server. This data includes (but is not limited to) server name, port number, and socket type for both the incoming and outgoing mail servers. This data is retained by Mozilla in its original form for 10 days for debugging purposes only. After that, it is retained in aggregate form only.  We may release reports containing aggregated, anonymized summaries of the data to the community to aid in product and design decisions.
+        </textarea>
+        <span class="error"/></td></tr>
     <tr><td colspan="2">
-    <font size="-1" id="global">By clicking on 'I accept' below you are
-      agreeing to the <a href="" class="tos external">Terms of Service</a>
-      above and the <a href="" class="privacy external">Privacy
-      Policy</a>.</font>
+      <span class="commentary" id="global">By clicking on 'I accept' below
+        you are agreeing to the Terms of Service above, and the
+        third-party's <a href="" class="tos external">Terms of Service</a>
+        and <a href="" class="privacy external">Privacy Policy</a>.</span>
       <span class="error"></span>
       </td></tr>
     <tr><td colspan="2" align="center">

chrome/skin/accountProvisioner.css

@@ -103,6 +103,17 @@ button:active {
   color: #333;
 }
 
+.header .commentary {
+  font-size: x-small;
+  margin: 5px 0;
+  color: #666;
+}
+
+/* External things are links that open in a browser, so underline them. */
+.external {
+  text-decoration: underline;
+}
+
 #content {
   background-color: rgba(255,255,255,0.6);
   -moz-border-radius: 5px;
@@ -171,10 +182,6 @@ label.placeholder {
   color: red;
 }
 
-.error a {
-  text-decoration: underline;
-}
-
 .success .title {
   color: #333;
 }