<p></p>
<p>This issue is still festering (and should have been resolved a long time ago). There is a further angle in that we leak relevant data to gravatar because we show gravatar images for friends and nearby users for logged in users even if they themselves have gravatar support disabled.</p>
<p>If <a class="user-mention" data-hovercard-type="user" data-hovercard-url="/users/gravitystorm/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/gravitystorm">@gravitystorm</a> and <a class="user-mention" data-hovercard-type="user" data-hovercard-url="/users/tomhughes/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/tomhughes">@tomhughes</a> agree, the correct way to fix this is to only show (and query) gravatar images for:</p>
<p>a) logged in users, that</p>
<p>b) have gravatar support enabled (in this case we can actually argue that it is their own fault).</p>

<p style="font-size:small;-webkit-text-size-adjust:none;color:#666;">—<br />You are receiving this because you are subscribed to this thread.<br />Reply to this email directly, <a href="https://github.com/openstreetmap/openstreetmap-website/issues/1631#issuecomment-665010979">view it on GitHub</a>, or <a href="https://github.com/notifications/unsubscribe-auth/AAK2OLPLOAOFVPLN25HNBKTR53AFLANCNFSM4DZQ26FA">unsubscribe</a>.<img src="https://github.com/notifications/beacon/AAK2OLMIOZS225W6WQRFTMLR53AFLA5CNFSM4DZQ26FKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOE6RUGIY.gif" height="1" width="1" alt="" /></p>
<script type="application/ld+json">[
{
"@context": "http://schema.org",
"@type": "EmailMessage",
"potentialAction": {
"@type": "ViewAction",
"target": "https://github.com/openstreetmap/openstreetmap-website/issues/1631#issuecomment-665010979",
"url": "https://github.com/openstreetmap/openstreetmap-website/issues/1631#issuecomment-665010979",
"name": "View Issue"
},
"description": "View this Issue on GitHub",
"publisher": {
"@type": "Organization",
"name": "GitHub",
"url": "https://github.com"
}
}
]</script>