Upcoming changes in registration process
I see email addresses in Special:ManageTranslatorSandbox. Is the user who registers warned of such exposure?
Project:Privacy policy only mentions email addresses to say that they're not normally shown and says «the access [...] should be minimal and should be used only internally to serve the well-being of the project [...] Registered users are not required to provide an email address». Systematically looking at the email address of registered users is not "minimal" access, so unless/until there is a warning in the registration phase or in the privacy policy the current interface is illegal in EU where this website is hosted and operated. All this IANAL of course; please check.
P.s.: I've added to my special:mypage/common.css:
.email {
display: none;
}
.reminder-email {
display: none;
}
to avoid seeing information I may not be legally authorised to see.
I'll add the hiding to mediawiki:common.css as stopgap solution until the problem is addressed, if there are no objections.