copy-pasting my previous answer about the nature of data collected (it may have been in
The data contained in the automatic bug report (uReport) is described here:
It was designed with anonymity as a requirement and doesn't contain any user sensitive
data, only a simple backtrace and some statistical info like OS version and related
We don't save IP addresses where the reports are coming from.
Reporting to Bugzilla may contain sensitive data (coredump), but is manual, for advanced
users only and the user is required to do a review of the data.
I would add that if a user uploads to Bugzilla, he's agreeing to Bugzilla's
Right now, processed data is begin stored for indefinite time in the database, the
original uReport files uploaded are archived for approx. one year.
If you need anything more or to clarify something, please don't hesitate to contact
----- Original Message -----
From: "Tom Callaway" <tcallawa(a)redhat.com>
To: "Matthias Clasen" <mclasen(a)redhat.com>,
Sent: Friday, February 13, 2015 5:16:59 PM
On 02/13/2015 10:14 AM, Matthias Clasen wrote:
> Its been a few weeks.
> still states: This Privacy Statement was last amended on August 14, 2008.
> Can we come to some conclusion and either update the policy, or create
> a separate document that talks about Fedora, the product, instead of
> Fedora the project ?
In order to do either, I need to understand how we (Red Hat/Fedora) are
storing personal data about users and systems. I need to sync up with
the abrt team to determine what they are collecting and storing, and for
how long. If the Desktop group is collecting and storing any
information, it would be good to know that as well (you can send it
directly to me).
legal mailing list