Event applications - a disclaimer about e-mail visibility

Proposals
1

Every user which has access to applications for an event (https://apps.magicjudges.org/events/applications/list/EVENTID) also has access to e-mail addresses of all applicants via the “Export as CSV” feature.

This is in contradiction with the general approach to e-mail address confidentiality in Judge Apps. No normal user can find out e-mail address of another user except when the other user discloses it themselves via Judge e-mail sending.

Possible solution:

A. Display a disclaimer when a user is creating their application to an event informing them about the fact that anyone with the access to the application will also be able to see their e-mail address linked to the JA account.

B. Add such disclaimer to the JA Terms and conditions (if there will ever be any :wink: ).

C. Add such disclaimer to the Judge Apps account creation page (JudgeApps | Sign up) and Judge Apps account modification page (https://apps.magicjudges.org/profiles/edit). There is already a notice; so just update it with this additional info?

D. Remove the e-mail address column from the .csv export. (impractical solution as that info is sometimes really useful when organizing events).

2

Email address is hidden I think more to prevent email harvesting for spam purposes than out of any privacy concern. After all, I don’t think anyone would be surprised that, having submitted a job application, their employer would need a way to contact them.

Point taken, though. I think the notice is better placed on the Event Application screen rather than the Profile Edit screen, so that it’s displayed when the information is actually being shared. I’ll work on some language to include there.