Skip to main content

Indie game storeFree gamesFun gamesHorror games
Game developmentAssetsComics
SalesBundles
Jobs
TagsGame Engines

Privacy bug: User profile settings want to publish email address

A topic by God, owner of the cosmos created 80 days ago Views: 2,497 Replies: 2
Viewing posts 1 to 2
(1 edit)

When I go here https://itch.io/user/settings I find my email address in the "Display name" box (annotated as "Name to be shown in place of your username, leave blank to default to username").

I did not put it there. Turns out, this is a suggestion itch.io makes ... which would become public the moment I click "Save" at the bottom. This is a very easy mistake to make and clearly unintended by itch.io and definitely by the users.

If I enter a name here and save, that name is shown at the top of my profile. If I now remove that text and save, my profile shows the true user name again ... and the "Display name" box is again populated with the private email address. This is a serious issue.

(+1)

The suggestion comes from your web browser

You may be right about that ...

This could still be avoided by setting it up differently. The HTML says

name="user[display_name]"

Guess Chrome is a bit overzealous with filling it out.

The question is, is this a common occurrence, and could it easily be avoided by e.g. changing the HTML name value?