Thought this was interesting and worth knowing about

  • Zerush@lemmy.ml
    link
    fedilink
    arrow-up
    45
    arrow-down
    1
    ·
    edit-2
    3 days ago

    Thunderbird May Disclose Information To: Mozilla Affiliates: Thunderbird is a project of MZLA Technologies Corporation, a subsidiary of Mozilla Foundation and an affiliate of Mozilla Corporation, and as such, shares some of the same infrastructure. This means that, from time to time, your data (e.g., crash reports, and technical and interaction data) may be** disclosed to Mozilla Corporation and Mozilla Foundation**. If so, it will be maintained in accordance with the commitments we make in this Privacy Notice.

    DNS servers, Standard Autoconfiguration URIs, and Mozilla’s Configuration Database: To simplify the email set-up process, Thunderbird tries to determine the correct settings for your account by contacting Mozilla’s configuration database as well as external servers. These include DNS servers and standard autoconfiguration URIs. During this process, your email domain may be sent to Mozilla’s configuration database, and your email address may be disclosed to your network administrators.

    Amazon Web Services: Thunderbird uses Amazon Web Services (AWS) to host its servers and as a content delivery network. Your device’s IP address is collected as part of AWS’s server logs.

    Email address providers (Desktop Only Legacy): Prior to version 128, Thunderbird partnered with Gandi.net and Mailfence to allow you to create a new email address through Thunderbird. If you choose to use this feature, your email address search terms are sent to Gandi.net and Mailfence to return available addresses. In addition, your country location is also shared to provide the correct prices. You can learn more about Gandi.net’s and Mailfence’s data practices by reading their privacy notices.

    Always good to read TOS and PP of an service.

    • The Octonaut@mander.xyz
      link
      fedilink
      arrow-up
      20
      ·
      3 days ago

      I’m always confused when people are surprised by something like an account sync meaning that the operators have to store your data

      Makes me wonder if they understand how Lemmy works…

      • Zerush@lemmy.ml
        link
        fedilink
        arrow-up
        2
        ·
        2 days ago

        Yes, naturally to create an account for Sync, they have to store your data. But it’s not the same if they also share these with third parties.

        • The Octonaut@mander.xyz
          link
          fedilink
          arrow-up
          1
          ·
          2 days ago

          If third parties means AWS, then every website you’ve accessed this year shares your data with third parties. This is why the GDPR exists.

          • Zerush@lemmy.ml
            link
            fedilink
            arrow-up
            1
            arrow-down
            1
            ·
            edit-2
            1 day ago

            Yes, but this is a different thing. It’s clear that you are not private, even using TOR, if you use Google for search, post on Fakebook or use another page/service which logs and profile your activity, but it’s different if the browser itself or/and its company is tracking you, sharing it with third parties. That is the point. GDPR limit this to an minimum, but don’t avoid it completely. More than ever is important that you ALWAYS read TOS and PP of every app/service before using it. A good rule is: longer and more written in a legal jargon, difficult to understand and many external links, it is a sign that the app or service is trying to hide its activities and dark patterns by boring the user. A honest app/service don’t need this tricks, using a short and clear text.

              • Zerush@lemmy.ml
                link
                fedilink
                arrow-up
                1
                ·
                18 hours ago

                That of Mozilla is enough clear, although not much better with several external links that must be checked separately. But in general it is a fairly valid rule that the site has things to hide if it puts a very long legal text. A normal user does not bother to read a text of 2 or more pages in a difficulty legal jargon.

                Honest sides don’t need to do it, good examples are the PPs of the SSuite (the shortest ever) or Andisearch, which are between the bests I know.

          • Legume5534@lemm.ee
            link
            fedilink
            English
            arrow-up
            1
            ·
            2 days ago

            Depends. Every hostname accessed? Sure. Every full URL? Not with https being everywhere these days.

      • adr1an@programming.dev
        link
        fedilink
        arrow-up
        4
        ·
        3 days ago

        Not a counterpoint, but to extend a bit on how it could be done: encrypted data. Or, self-hosting server part available, like Mozilla’s (i.e. GarduaLinux has a fork of Librewolf/ Floorp, called Firedragon which uses their own firefox server for account sync)

      • Zerush@lemmy.ml
        link
        fedilink
        arrow-up
        3
        arrow-down
        16
        ·
        3 days ago

        The Vivaldi browser has an inbuild Mail client, which share nothing to third parties. Vivaldi is complete independent from third party investors and share nothing with other companies.

          • Zerush@lemmy.ml
            link
            fedilink
            arrow-up
            4
            arrow-down
            4
            ·
            3 days ago

            Because it’s an independent employee owned cooperative from Norway, without any extern investors. It don’t need to share data to make money. It’s business model is different from sharing userdata.

            PP

            At Vivaldi Technologies AS (“Vivaldi AS”), protecting your privacy is a top priority. We strictly protect the security of any and all personal information you provide to us while using Vivaldi products and services. We do not share or sell information to any third party and we proactively protect all user data from disclosure, with the only exception being if requested by legitimate law agencies with a court order.

            Tests (Webbkoll, Blacklight)

            It is currently much more important to promote EU products to break the hegemony of the great US corporations. Vivaldi (Norway), along with Mullvad (Sweden) and Konqueror (Germany) are the only relevant browsers in the EU, after the disconinuated since some years UR Browser (France). As said, Vivaldi also include an inbuild Mail client and Feed reader, so are no need to use Thunderbird or other extern app.

            • Sips'@slrpnk.net
              link
              fedilink
              arrow-up
              2
              arrow-down
              2
              ·
              3 days ago

              I very much agree with this. Not all closed software means it’s “evil”. Look at obsidian for example that’s closed source but ut has a widely accepted user base nonetheless. Vivaldi is a great browser choice and way within my “threat model” at least.

              • Zerush@lemmy.ml
                link
                fedilink
                arrow-up
                2
                arrow-down
                1
                ·
                2 days ago

                That is the point, it’s not so important that a few % of the UI source of an browser is proprietary or not, way more important for the user are the ethics and transparency of an company

                • Sips'@slrpnk.net
                  link
                  fedilink
                  arrow-up
                  1
                  arrow-down
                  1
                  ·
                  2 days ago

                  Yeah! Obviously not for everyone - but i do think people should re-consider their initial judgments. Just like I recently decided to switch to Fastmail away from Proton. I did some research around Fastmail, and to me, their missions and values won me over. For example, they help develop open standards such as jmap over imap. They own all of their own hardware - and encrypt all data at rest. Might not suit everyone, but defo suits me well and it’s been a very nice experience so far.