{% extends "docs/docs_base.html" %}

{% block doc_title %}Protected Data Access{% endblock %}

{% block doc_content %}
  <div class="body">
    <h1 id="definition">Protected data on Crash Stats</h1>
    <p>
      Crash reports include memory dumps which can contain memory from the heap
      which may contain sensitive information such as visited urls, credentials
      (ids, email addresses, usernames, etc), exploitability information and so
      on. This information is protected and not publicly available on Crash
      Stats.
    </p>
    <p>
      Crash reports also contain annotations which may contain private user
      data such as user comments and visited urls. This information is also
      protected and not publicly available on Crash Stats.
    </p>
    <p>
      In order to view protected data, you must be signed in and have been
      granted access to that data.
    </p>

    <h1 id="policy">Access to protected data</h1>
    <p>
      Anyone with access to protected data agrees to the following:
    </p>
    <pre>* Crash dumps contain memory contents and may contain private user data
* Only access protected data and dumps as necessary
* Keep protected data securely on Mozilla hardware
* When finished with a memory dump, delete it (within 30 days)
* Do not share protected data from the dump publicly (on bugzilla, irc, etc)
* Do not share protected data with non-employees, including partner organizations; any
  requests to review exceptions to this policy can be brought up with Trust and Security
* It is fine to share stack traces, analysis, and other non-protected data
* Access is conditional on employment and will be revoked upon departure from Mozilla
* Access will be removed after a year of inactivity

The most recent copy of this agreement is at: https://crash-stats.mozilla.org/documentation/protected_data_access/</pre>

    <h1 id="requestaccess">How to request protected data access</h1>
    <p>
      To request access to protected data, please:
    </p>
    <ol>
      <li>
        Log into <a href="https://crash-stats.mozilla.org/">Crash Stats</a>
        using your LDAP account.
      </li>
      <li>
        Fill out a
        <a href="https://bugzilla.mozilla.org/enter_bug.cgi?bug_status=NEW&bug_type=task&component=General&defined_groups=1&filed_via=standard_formform_name=enter_bug&groups=mozilla-employee-confidential&op_sys=All&product=Socorro&rep_platform=All&short_desc=grant%20YOURNAME%20access%20to%20protected%20data">protected data access request</a>.
      </li>
    </ol>
    <p>
      A Crash Stats admin will field the request as soon as they are able. If
      you need access immediately, please note that in the bug.
    </p>
  </div>
{% endblock %}