<div dir="ltr">I think there may be a difference between research studies and privacy
law related to collecting general user statistics. This might be untested though, and for Sugar, both studies on how children use it
as well generic statistics straight from the application(s) may be
useful.<br><br><div><blockquote style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex" class="gmail_quote">I'm not interested in age/grade, or their specific IP addresses :)<br><br>What information do you think is safe to collect?<br></blockquote><br></div><div>At this point in time, I'm not going to speculate. It's too easy to take multiple identifiers (such as Name and Zip/Postal Code) and uniquely identify someone the vast majority of the time.<br><br></div><div>IP Addresses, Serial numbers, GUIDS/UUIDs, etc. all could be considered uniquely or near-uniquely identifying of a person depending on the country.<br></div><div><br></div><div>Leah at OLPC might be able to tell you some things. But at the same time she likely would have to point out she isn't your lawyer and cannot provide you or Sugar Labs legal advice.<br></div><div><br></div><div>If you want to know the gritty details of how this all works, you really need to speak to a compliance specialist (which the Conservancy might be able to point Sugar Labs to), and not ask for legal advice in a public forum :)<br><br><blockquote style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex" class="gmail_quote">I want to understand which activities are used, in which languages, and
in which countries. None of the above is needed for that. <br></blockquote><br></div><div>As long as you don't care about which machine(s) calls in how often and carefully toss away (& don't log) anything which could identify a user, I believe this is feasible. What the criteria would be in order to get an application that calls home in various distros would gave to be determined, although many distros have things like Firefox which do this already.<br><br></div><div>There would be some bias the results based on how well any particular user/country has Internet access.<br><br></div><div>How this gets disclosed to users would have to be determined.<br><br></div><div>Sugar already asks for user's grade and gender on first boot even if no statistics engine is in place, so there may have to be some sort of privacy policy or other explanation of what's going on.<br><br></div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, May 17, 2016 at 1:38 PM, Dave Crossland <span dir="ltr"><<a href="mailto:dave@lab6.com" target="_blank">dave@lab6.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div class="gmail_extra"><span class=""><br><div class="gmail_quote">On 17 May 2016 at 00:01, Dave Crossland <span dir="ltr"><<a href="mailto:dave@lab6.com" target="_blank">dave@lab6.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex"><div><span style="color:rgb(50,50,50);font-family:Helvetica,Arial,"Nimbus Sans L",sans-serif;font-size:13px;line-height:19.5px">Both these seem to be related to _children’s personal information_; I don't think anyone here is interested in that. </span><br></div><span><div></div></span></blockquote></div><div class="gmail_extra"><br></div></span><a href="https://www.ftc.gov/tips-advice/business-center/guidance/complying-coppa-frequently-asked-questions" target="_blank">https://www.ftc.gov/tips-advice/business-center/guidance/complying-coppa-frequently-asked-questions</a> is good, and §3 defines this:<br><br>
</div><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><div class="gmail_extra"><div class="gmail_extra">3. What is Personal Information?</div></div><div class="gmail_extra"><div class="gmail_extra">The amended Rule defines personal information to include:</div></div><div class="gmail_extra"><div class="gmail_extra"><br></div></div><div class="gmail_extra"><div class="gmail_extra">First and last name;</div></div><div class="gmail_extra"><div class="gmail_extra">A home or other physical address including street name and name of a city or town;</div></div><div class="gmail_extra"><div class="gmail_extra">Online contact information;</div></div><div class="gmail_extra"><div class="gmail_extra">A screen or user name that functions as online contact information;</div></div><div class="gmail_extra"><div class="gmail_extra">A telephone number;</div></div><div class="gmail_extra"><div class="gmail_extra">A social security number;</div></div><div class="gmail_extra"><div class="gmail_extra">A persistent identifier that can be used to recognize a user over time and across different websites or online services;</div></div><div class="gmail_extra"><div class="gmail_extra">A photograph, video, or audio file, where such file contains a child’s image or voice;</div></div><div class="gmail_extra"><div class="gmail_extra">Geolocation information sufficient to identify street name and name of a city or town; or</div></div><div class="gmail_extra"><div class="gmail_extra">Information concerning the child or the parents of that child that the operator collects online from the child and combines with an identifier described above.</div></div></blockquote><br><div>I want to understand which activities are used, in which languages, and in which countries. None of the above is needed for that. </div><div><br></div><div>How do I check with Conservancy about this?</div></div>
</blockquote></div><br></div>