sekund-plugin-react icon indicating copy to clipboard operation
sekund-plugin-react copied to clipboard

Move PostHog data collection to the backend

Open joethei opened this issue 2 years ago • 3 comments

Hi @ckemmler. We (the Obsidian team) noticed that the Sekund plugin has client-side telemetry code posting user data to PostHog from directly within Obsidian. We are still drafting a privacy and data collection policy for plugins, but there are a few guidelines we have already agreed on. Mainly, plugins should not submit user data to third-party telemetry services from directly within Obsidian, even if the data collection is opt-in.

Client-side libraries like PostHog's make it too easy for user data unrelated to your plugin to get collected. Instead, we ask that you move that data collection to your backend service; you should still be able to collect the same relevant usage information without risking user privacy.

joethei avatar Feb 07 '23 20:02 joethei

Hi Johannes. Understood. Would it be OK to give me a rough timeline on when this has to be done, so I can plan ahead?Thanks!Candide Sent from Proton Mail for iOS On Tue, Feb 7, 2023 at 21:58, Johannes Theiner @.***> wrote:
Hi @ckemmler. We (the Obsidian team) noticed that the Sekund plugin has client-side telemetry code posting user data to PostHog from directly within Obsidian. We are still drafting a privacy and data collection policy for plugins, but there are a few guidelines we have already agreed on. Mainly, plugins should not submit user data to third-party telemetry services from directly within Obsidian, even if the data collection is opt-in. Client-side libraries like PostHog's make it too easy for user data unrelated to your plugin to get collected. Instead, we ask that you move that data collection to your backend service; you should still be able to collect the same relevant usage information without risking user privacy.

—Reply to this email directly, view it on GitHub, or unsubscribe.You are receiving this because you were mentioned.Message ID: @.***>

ckemmler avatar Feb 08 '23 12:02 ckemmler

In the policy guidelines, we only dictate that the changes should be "within a reasonable time frame" so while there's no hard timeline, we ask that the changes get done in the next few weeks or we will temporarily remove the plugin from listing it in the Community Plugins list until its fixed.

joethei avatar Feb 08 '23 13:02 joethei

@joethei We are busy doing a complete redesign of the plugin. This will certainly take another few weeks. Please, let me know if it's OK to include the fix to this issue in this next release, or if you guys really want this to happen sooner.

ckemmler avatar Mar 01 '23 11:03 ckemmler