From 80a503b65df230276bceea3db877b571b7b5e832 Mon Sep 17 00:00:00 2001 From: Robert Date: Tue, 7 Feb 2023 11:31:00 +0000 Subject: [PATCH 1/2] Update telemetry privacy document for UI interaction and exceptions --- .../about-telemetry-in-codeql-for-visual-studio-code.rst | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/docs/codeql/codeql-for-visual-studio-code/about-telemetry-in-codeql-for-visual-studio-code.rst b/docs/codeql/codeql-for-visual-studio-code/about-telemetry-in-codeql-for-visual-studio-code.rst index 6b6dd1c03e0..06a449cdfb0 100644 --- a/docs/codeql/codeql-for-visual-studio-code/about-telemetry-in-codeql-for-visual-studio-code.rst +++ b/docs/codeql/codeql-for-visual-studio-code/about-telemetry-in-codeql-for-visual-studio-code.rst @@ -20,7 +20,12 @@ What data is collected If you opt in, GitHub collects the following information related to the usage of the extension. The data collected are: - The identifiers of any CodeQL-related VS Code commands that are run. -- For each command: the timestamp, time taken, and whether or not the command completed successfully. + - For each command: the timestamp, time taken, and whether or not the command completed successfully. +- Usage of UI elements, including buttons, links, and other inputs. + - The contents of links or text inputs is not recorded. + - Mouse movement and hovering is not recorded. +- Occurrence of exceptions and error. + - All sensitive information such as file paths or non-static exception message content is removed before uploading. - VS Code and extension version. - Randomly generated GUID that uniquely identifies a CodeQL extension installation. (Discarded before aggregation.) - IP address of the client sending the telemetry data. (Discarded before aggregation.) @@ -45,6 +50,7 @@ We only collect the minimal amount of data we need to answer the questions about - No CodeQL database names or contents - No contents of CodeQL queries - No filesystem paths +- No user-input text Disabling telemetry reporting ------------------------------ From 15b293c56dfb65a535b0a4f4a62310ab34b972f0 Mon Sep 17 00:00:00 2001 From: Robert Date: Tue, 7 Feb 2023 17:11:47 +0000 Subject: [PATCH 2/2] Apply copy edits --- ...out-telemetry-in-codeql-for-visual-studio-code.rst | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/docs/codeql/codeql-for-visual-studio-code/about-telemetry-in-codeql-for-visual-studio-code.rst b/docs/codeql/codeql-for-visual-studio-code/about-telemetry-in-codeql-for-visual-studio-code.rst index 06a449cdfb0..362f2d68889 100644 --- a/docs/codeql/codeql-for-visual-studio-code/about-telemetry-in-codeql-for-visual-studio-code.rst +++ b/docs/codeql/codeql-for-visual-studio-code/about-telemetry-in-codeql-for-visual-studio-code.rst @@ -21,11 +21,11 @@ If you opt in, GitHub collects the following information related to the usage of - The identifiers of any CodeQL-related VS Code commands that are run. - For each command: the timestamp, time taken, and whether or not the command completed successfully. -- Usage of UI elements, including buttons, links, and other inputs. - - The contents of links or text inputs is not recorded. - - Mouse movement and hovering is not recorded. -- Occurrence of exceptions and error. - - All sensitive information such as file paths or non-static exception message content is removed before uploading. +- Interactions with UI elements, including buttons, links, and other inputs. + - Link targets and text inputs are not recorded. + - Mouse movement and hovering are not recorded. +- Occurrence of exceptions and errors. + - All sensitive information such as file paths and non-static exception message content are removed before uploading. - VS Code and extension version. - Randomly generated GUID that uniquely identifies a CodeQL extension installation. (Discarded before aggregation.) - IP address of the client sending the telemetry data. (Discarded before aggregation.) @@ -51,6 +51,7 @@ We only collect the minimal amount of data we need to answer the questions about - No contents of CodeQL queries - No filesystem paths - No user-input text +- No mouse interactions, such as movement or hovers Disabling telemetry reporting ------------------------------