update privacy notice Aug 20, 2021

2021-08-20 13:27:09 -06:00 · 2021-08-20 13:27:09 -06:00 · ce53cb073f
--- a/PRIVACY.md
+++ b/PRIVACY.md
@ -1,68 +1,70 @@
 # Privacy Notice for Hubs and Spoke
-Version 3.3, November 15, 2019
+# Hubs and Spoke Privacy Notice
-## At Mozilla (that’s us), we believe that privacy is fundamental to a healthy internet.
+Aug 20, 2021
-In this Privacy Notice, we explain what data may be accessible to Mozilla or others when you use [Hubs](https://hubs.mozilla.com) or [Spoke](https://hubs.mozilla.com/spoke). We also adhere to the practices outlined in the Mozilla [privacy policy](https://www.mozilla.org/en-US/privacy/) for how we receive, handle, and share information we collect from Hubs.
+In this Privacy Notice, we explain what data [Hubs](https://hubs.mozilla.com) and [Spoke](https://hubs.mozilla.com/spoke) collect and share, and why. We also adhere to the practices outlined in the Mozilla [Privacy Policy](https://www.mozilla.org/en-US/privacy/) for how we receive, handle, and share information.
-## Things you should know:
+## Information We Collect and Share When You’re In a Room
-<details open>
+### Information You Share With Us and Other Participants
  <summary>
    <strong>Your presence and communications are sent to Mozilla and other Room participants.</strong>
  </summary>
- **Avatar data**: We receive and send to others in the Room the name and likeness of your Avatar, its position in the Room, and your interactions with objects in the Room. 
+We need certain information to operate Hubs and Spoke. For example, we need information about your account in order to save your avatar. Here’s the information we may receive from you:
  - **Custom Avatars**: You may create a custom avatar. If you create an account, Mozilla will store your custom avatar, associated with your account.
  - **Stock Avatars**: If you choose one of the regular avatars, you may login to store information about your avatar with Mozilla. You can optionally store information about your Avatar in your browser’s local storage if you do not log in to your account.  
 - **Room data**: Rooms are publicly accessible to anyone with the URL. Mozilla receives data about the virtual objects and Avatars in a Room and shares that data with others in the Room.     
 - **Voice data**: If your microphone is on, Mozilla receives and sends audio to other users in the Room. Mozilla does not record or store the audio.  *Be aware that once you agree to let Hubs use your microphone, it will stay on as long as you remain in a Hubs room, unless you turn it off.*
 - **In-Room Photos and Video**: You can use the camera tool to take photos and video unless the room owner has disabled this feature. The camera tool displays a red icon during filming. Your avatar will also indicate to others with a red icon that you are filming and capturing audio from enabled microphones in the room.
  - Data retention: If you take a photo or video, the file is stored locally on your device and uploaded to Mozilla’s servers so that it can be shared within the room. Pinned files are stored permanently in your room unless you remove it. Unpinned files are deleted from Mozilla’s servers after 72 hours. 
 - **Third-Party Communications Services**: Hubs allows you to connect some third-party services to a Hubs room.
  - **Twitter**: Logging into your Twitter account from Hubs allows you to tweet and share 2D images. Any content you tweet will be shared with Twitter and published publicly on the Twitter platform. You can see Twitter’s [Privacy Policy](https://twitter.com/en/privacy) for more information.
  - **Discord**: Hubs allows you to connect Discord to a Hubs room. When someone has connected Discord to a Hubs room, we store access tokens and the server and channel IDs that have been connected. We will synchronize chat messages, room changes, 2D and 3D objects you create, and whether a user joins or leaves with the connected Discord channel, but do not log any of these synchronized messages. For diagnostics, we log aggregated counts such as the number of messages and users who have joined relevant channels. You can see [Discord’s Privacy Policy](https://discordapp.com/privacy) for more information.
- You can learn more by looking at the [code itself](https://github.com/mozilla/hubs) for Hubs. [Janus SFU](https://github.com/mozilla/janus-plugin-sfu), [Reticulum](https://github.com/mozilla/reticulum), [Hubs](https://github.com/mozilla/hubs), [Hubs-Ops](https://github.com/mozilla/hubs-ops), [Discord Bot](https://github.com/MozillaReality/hubs-discord-bot)
+**Account information**: You don’t need an account to use Hubs. However, certain features (like storing your avatar), require an account. You can create an account through Mozilla or through Discord. If you create an account with your email address, we store a hashed version of your email address. If you create an account through Discord, we receive the email address associated with your Discord account and your Discord avatar.
-</details>
+**Room Name and URL**: Rooms and room names are publicly accessible to anyone with the URL. Mozilla stores the name and the URL for the link you share so you and others with the link to the Room can use it again.
-<details open>
+**Avatar data**: Your selected avatar and name will be shared with other participants in your room. If you’re logged in to your account, we will store your avatar. If you’re not logged into your account, we will not store your avatar.
  <summary>
    <strong>Mozilla receives data you create and share with Spoke and Hubs.</strong>
  </summary>
- **Images, Video, and Objects**: Mozilla receives video and image file links to process and display them in the Hubs Room. Mozilla stores this data as long as you remain in the Room. If you pin a video, image, or object in the Room, Mozilla will store that information until the object or room is deleted.
+**Voice data**: If your microphone is on, Hubs sends the audio to other users in the room. Mozilla does not store the audio; we only receive it temporarily to transmit it to others in the room.
 - **Scenes and Avatars You Share**: Mozilla receives 3D Room model links, 3D Avatar information, and the name of the Room or Avatar in order to process and display the Room or Avatar. Mozilla stores the name and the URL for the link you share so you and others with the link to the Room can use it again. 
 - **Search**: You can search for images, GIFs, and 3D Models to share in Hubs. We use third-party search providers. When you search, we will send your searches to these third parties, which have their own privacy policies. 
  - Microsoft Bing Video & Image Search: https://privacy.microsoft.com/en-us/privacystatement
  - Tenor: https://tenor.com/legal-privacy
  - Sketchfab: https://sketchfab.com/privacy
  - YouTube: https://policies.google.com/privacy
  - Twitch: https://www.twitch.tv/p/legal/privacy-policy/
-<details open>
+**Chat**: If you send messages in Hubs, Hubs shares it with the other users in the room. Mozilla does not store chats; we only receive it temporarily to transmit it to others in the room.
  <summary>
    <strong>Mozilla receives data when you create and publish Scenes with Spoke or create a custom Avatar.</strong>
  </summary>
- **Scenes and Avatars You Create**: When you create a scene with Spoke or a custom avatar, Mozilla receives a copy of that scene or avatar. Mozilla stores that data in order to be able to process and display the scene or avatar through Hubs. 
+Photos and Videos You Take, and Photos, Videos, and Objects You Upload: If you take photos and video in a Hubs room or upload photos, videos, or objects to a room, Mozilla stores them so you can share them within the room. They are deleted within 72 hours unless you pin them. If you pin them they will be stored until you remove them from the room and they will be viewable by anyone who can access the room.
 - **Publishing Your Scene or Avatar**: When you publish a scene or avatar to Hubs, Mozilla will ask for your email address to send you a link to verify your email. Mozilla will receive and store your email address to allow you to log in and view your 3D Room models and Avatars. Mozilla stores a hashed version of email addresses you use to publish a scene, so the stored versions are not available in readable form. 
 - **Remixing, Promotion, and Favorites**: When you publish a scene or avatar to Hubs, you have the option to “Allow Remixing with Creative Commons [CC-BY 3.0](https://creativecommons.org/licenses/by/3.0/)” or allow Mozilla to promote your scene or avatar. If you choose one or both of these options, Mozilla will share your scene or avatar publicly and you will have the option of including attribution information, which will also be publicly available. If you mark a Room or Avatar as a Favorite, Mozilla will store that information associated with your account.
- You can learn more by looking at the [code itself](https://github.com/mozilla/spoke) for Spoke. 
+You can learn more by looking at the code itself: [Hubs](https://github.com/mozilla/hubs) (Hub’s front-end source code) [Dialog](https://github.com/mozilla/dialog/) (Hub’s service to transmit voice data), [Reticulum](https://github.com/mozilla/reticulum) (Hubs’s backend server), [Hubs-Ops](https://github.com/mozilla/hubs-ops) (Hubs’ infrastructure code), [Discord Bot](https://github.com/MozillaReality/hubs-discord-bot) (enabled users to connect their Discord community to Hubs).
 </details>
-<details open>
+### Other Information We Receive
  <summary>
    <strong>Mozilla receives technical and interaction data to improve performance and stability for Hubs.</strong>
  </summary>
- **Account data**: You do not need to create an account to use Hubs. If you decide to create an account with your email address, we receive your email address to send you a login link, but stores only a hashed version of your email address. If you decide to use Discord to create your account, we receive the email address associated with your Discord account and your Discord avatar. 
+We use technical, interaction, error, and website analytics data to help us improve the Hubs and Spoke experiences:
- **Technical data**: We receive and store data about Room URLs and names; the type of device you use to interact with Hubs, as well as its operating system, language, the name and version of browser; and other data to load and operate the Room.
+
- **Interaction data**: We receive data about your interactions with the Hubs service itself such as the number of Rooms created, messages sent through or to third-party services like Slack and Discord, the maximum number of users in a particular room at one same time, the start and end time of a user’s interaction with Hubs, the amount of time a user interacts with Hubs through Virtual Reality, the first time in a particular month or day that a user begins to use Hubs. Mozilla uses third party services to store and analyze these operational messages. We also also use Google Analytics, which places a cookie on your device, to obtain metrics on how users engage with our websites. This helps us to improve site content.
+**Technical data**: We receive data about the type of device you use to interact with Hubs, as well as its operating system, language, the name and version of browser, and other data needed to load and operate a room.
- **Website data**: We use Google Analytics to better understand how you interact with Hubs apps and websites. For example, we may use cookies to track de-identified information such as the number of Hubs rooms you create or enter, interactions with buttons and menus, and session length. To consistently improve the Hubs experience, we collect information about browser type and version, viewport size, and screen resolution. This allows us to understand how people interact with Hubs so we can improve it. We also collect your location, and the language setting in your browser to make sure it looks right for you. If you’d prefer to opt out of Google Analytics data collection, you can install the [Google Analytics Opt-out Browser Add-on](https://tools.google.com/dlpage/gaoptout), which stops data transmission to Google Analytics.
+
- **Error Data**: In order to diagnose problems, Hubs sends Mozilla logs of error messages (which include the Room URL, response time for requests, the page you were on when you encountered the error, your operating system, browser information, and may include your IP address). 
+**Interaction data**: We receive data about your interactions with Hubs, such as the number of rooms created, messages sent through or to third-party services like Discord (including aggregated counts such as the number of messages and users who have joined relevant channels), the number of users in a particular room, the start and end time of a your interaction with Hubs, the amount of time you interact with Hubs through virtual reality, the first time in a particular month or day that you begins to use Hubs.
- You can learn more by looking at the [code itself](https://github.com/mozilla/hubs) for Hubs.  [Janus SFU](https://github.com/mozilla/janus-plugin-sfu), [Reticulum](https://github.com/mozilla/reticulum), [Hubs](https://github.com/mozilla/hubs), [Hubs-Ops](https://github.com/mozilla/hubs-ops), [Discord Bot](https://github.com/MozillaReality/hubs-discord-bot)
+
-</details>
+  
 **Error Data**: When Hubs or Spoke crashes or fails, Mozilla receives error messages which may include the room URL, response time for requests, the page you were on when you encountered the error, your operating system, browser information, and your IP address.
 **Website Analytics Data**: We use Google Analytics (GA) to better understand how you interact with Hubs and Spoke For example, we collect de-identified information about the number of Hubs rooms you create or enter, your interactions with buttons and menus, your session length, your location (country, state/province, and city), language settings, your browser type and version, viewport size, and screen resolution. You can opt-out of GA data collection by installing the [Google Analytics Opt-out Browser Add-on](https://tools.google.com/dlpage/gaoptout).
 ## Information We Collect When Your Create and Publish Scenes or Custom Avatars
 **Scenes and avatars you create**: You need an account to create scenes in Spoke and custom avatars in Hubs. When you create a scene or custom avatar, Mozilla stores that scene or avatar so we can display it.
 **Attribution information**: When you publish a scene or avatar to Hubs, you have the option to “Allow Remixing with Creative Commons [CC-BY 3.0](https://creativecommons.org/licenses/by/3.0/)” or allow Mozilla to promote your scene or avatar. If you choose one or both of these options, Mozilla will share your scene or avatar and your attribution information publicly.
 **Account information**: To publish a scene or avatar to Hubs, you need to have a Hubs account. Mozilla will receive and store a hashed version of your email address to allow you to log in and view your 3D Room models and Avatars.
 You can learn more by looking at the [code itself](https://github.com/mozilla/spoke) for Spoke.
 ## Who Hubs May Disclose Information To
 Amazon Web Services (AWS): Hubs and Spoke use Amazon’s cloud storage service to store the information collected through Hubs and Spoke. You can read [AWS’s Privacy Notice](https://aws.amazon.com/privacy/) for more information.
 Search providers: You can search for images, GIFs, and 3D Models to share in Hubs. When you search, we will send your searches to supported third parties to fulfill the search. Mozilla does not store your search queries or the search results. We support the following providers:
 -   [Tenor](https://tenor.com/legal-privacy)
 -   [Sketchfab](https://sketchfab.com/privacy)
 -   [YouTube](https://policies.google.com/privacy)
 -   [Twitch](https://www.twitch.tv/p/legal/privacy-policy/)
 **Twitter**: If you connect Twitter to Hubs, you can tweet and share 2D images from Hubs rooms. Any content you tweet will be shared with Twitter and published on the Twitter platform. You can see Twitter’s [Privacy Policy](https://twitter.com/en/privacy) for more information.
 **Discord**: If you connect Discord to Hubs, we store access tokens and the server and channel IDs that have been connected. We will synchronize chat messages, room changes, 2D and 3D objects you create, and whether you join or leave with the connected Discord channel. Hubs does not log any synchronized messages. You can see [Discord’s Privacy Policy](https://discordapp.com/privacy) for more information.