Firefox3.1/themes/privacy

Introduction

The purpose of private browsing is to put Firefox into a temporary state where no information about the user's browsing session is stored locally. Firefox currently handles the user's privacy with a feature in preferences to clear all private data. This feature forces the user to choose between having privacy (even if only momentary), and other useful features like browsing history, and saved passwords. Users should be able to go "off the record", they shouldn't have to shoot the reporter.

If we later improve the functionality of history to include full text indexing, and possibly capturing thumbnails of sites visited, the need to respect user's privacy only increases.

Use Cases

Many people believe that the primary use case for private browsing mode is viewing pornography. While viewing pornography may be a popular use case due to the nature of content on the Web, assuming that this is the only reason that users need private browsing trivializes the overall feature. For instance, users may wish to begin a private browsing session to research a medical condition, or plan a surprise vacation or birthday party for a loved one. Use cases will range from users cheating on their spouse, to users buying engagement rings. Given the breadth of our user base, specific use cases are likely to be extremely varied.

User's Goals

The design of private browsing mode is based on the premise that our users have the following goals:

1) The ability to view sensitive information without worry of their browser later exposing that they viewed that information to other people

2) The ability to easily clear Firefox's recent history after viewing sensitive information in the case that the user forgot to enter private browsing mode to begin with

3) The ability to completely reset Firefox, removing every single trace of personal information (for instance when returning a work computer).

Additionally we may want to try to address the following user goal in the future when we begin to integrate in Weave functionality:

4) The ability to place the browser in a "Guest Mode" where (like private browsing mode) no personal information is stored during the course of the browsing session, but additionally no information about the user's previous browsing habits is accessible to the guest user. This would potentially involve a major profile manager redesign, and it out of scope for 3.1.

Visual / Emotional Design

One of the most intensely emotional reactions users can have towards their Web browser is when it embarrasses them in front of others. Conversely, I believe private browsing mode will potentially elicit a very positive emotional response from our users. I believe we should direct the visual design of private browsing mode to leverage the following thoughts and feelings:

• Uninhibited
• Free
• Stealthy
• Secret
• Someone just gave you an invisibility cloak

Interface Design

Goal

1) The ability to view sensitive information without worry of their browser later exposing that they viewed that information to other people