# Kde Identity privacy **URL:** \ **Category:** Help\ **Tags:** bugs\ **Created:** [October 14, 2026, 6:40pm UTC](https://discuss.kde.org/t/kde-identity-privacy/50952 "2026-10-14T18:40:52Z")\ **Posts on this page:** 13\ **Page:** 1
**Author:** ![Thanks2kde](https://discuss-cdn.kde.org/letter_avatar_proxy/v4/letter/t/e9bcb4/32.png) [@Thanks2kde](https://discuss.kde.org/u/Thanks2kde)\ **Post date:** [October 14, 2026, 6:40pm UTC](https://discuss.kde.org/t/kde-identity-privacy/50952/1 "2026-10-14T18:40:53Z")
Hi, I have a two questions concerning user privacy. 1. If i file a bug report on [https://bugs.kde.org/](https://bugs.kde.org/) then my email is visible to the public. Shouldn’t our emails only be visible to users who created an account to log into [bugs.kde.org](http://bugs.kde.org)? 2. How much information must you share about yourself for a KDE identity profile and does all data about users stay within the KDE identity ecosystem or is it shared with patrons or other services? I ask this as certain groups e.g. the e.V Group seems to require a lot of personal data including DOB, Address, phone number which for security reasons makes sense but I also want to know that this data is safely stored. Discovering that user emails are publicly available on [bugs.kde.org](http://bugs.kde.org) made made me concerned. Other than that. I love what KDE brings to the world and i still have a lot to learn about it. ---
**Author:** ![Rei\_Kurosawa](https://discuss-cdn.kde.org/letter_avatar_proxy/v4/letter/r/e5b9ba/32.png) [@Rei\_Kurosawa](https://discuss.kde.org/u/Rei_Kurosawa)\ **Post date:** [October 14, 2026, 7:52pm UTC](https://discuss.kde.org/t/kde-identity-privacy/50952/2 "2026-10-14T19:52:55Z")
KDE’s own privacy documents answer both points quite directly - and the answer to the first is unfortunately not what you’d hope: 1. For the bug tracker, KDE’s general privacy policy states that as an open bug tracking system, your email address and your name, if you provided one, will be made publicly accessible to both logged in and anonymous users. So the address being visible is the documented, intended behavior, not a misconfiguration. Registration requires an email address; the name is optional. Since there is no documented hide-my-email option, the practical mitigation is to register with an address you are comfortable having public. 2. For KDE Identity, two policies apply. The general privacy policy says Identity profiles are not publicly accessible - with one exception: KDE developers and members of the KDE e.V., whose name and email address are made public. All other profiles are considered private and are only made accessible to sites you log into, and no information is transferred to a service until you log into it for the first time. The KDE Identity privacy policy then describes who can see what inside KDE: the data shared with Identity-enabled sites is your username, full name and primary email address. Members of the e.V. can additionally see each other’s date of birth, home address and phone numbers. The e.V. board can see the name and primary email of all users, for administering the membership, and KDE’s sysadmins can access everything stored in Identity, because that is necessary to operate the service. Neither document lists patrons or sponsors as recipients - the documented sharing is with the sites you choose to log into and the internal groups above. So in short: bug tracker email = public by design; Identity profile = private unless you are a developer or e.V. member, and date of birth/address/phone only appear in the policies in the context of e.V. membership, where other e.V. members can see them. ---
**Author:** ![EatMyShorts](https://discuss-cdn.kde.org/user_avatar/discuss.kde.org/eatmyshorts/32/31803_2.png) [@EatMyShorts](https://discuss.kde.org/u/EatMyShorts)\ **Post date:** [October 14, 2026, 8:57pm UTC](https://discuss.kde.org/t/kde-identity-privacy/50952/3 "2026-10-14T20:57:12Z")
> [@Rei\_Kurosawa](#): > > 1. For the bug tracker, KDE’s general privacy policy states that as an open bug tracking system, your email address and your name, if you provided one, will be made publicly accessible to both logged in and anonymous users. So the address being visible is the documented, intended behavior, not a misconfiguration. Registration requires an email address; the name is optional. Since there is no documented hide-my-email option, the practical mitigation is to register with an address you are comfortable having public. I was unaware of this. It’s something that truly disappoints and annoys me. ---
**Author:** ![Nele](https://discuss-cdn.kde.org/user_avatar/discuss.kde.org/nele/32/33508_2.png) [@Nele](https://discuss.kde.org/u/Nele)\ **Post date:** [October 14, 2026, 9:04pm UTC](https://discuss.kde.org/t/kde-identity-privacy/50952/4 "2026-10-14T21:04:41Z")
Just use a throw away email address. No big deal. ---
**Author:** ![EatMyShorts](https://discuss-cdn.kde.org/user_avatar/discuss.kde.org/eatmyshorts/32/31803_2.png) [@EatMyShorts](https://discuss.kde.org/u/EatMyShorts)\ **Post date:** [October 14, 2026, 9:19pm UTC](https://discuss.kde.org/t/kde-identity-privacy/50952/5 "2026-10-14T21:19:27Z")
It is when you actually want to receive updates on reports you make or reports you follow. ---
**Author:** ![Arthurium](https://discuss-cdn.kde.org/letter_avatar_proxy/v4/letter/a/57b2e6/32.png) [@Arthurium](https://discuss.kde.org/u/Arthurium)\ **Post date:** [October 14, 2026, 9:29pm UTC](https://discuss.kde.org/t/kde-identity-privacy/50952/6 "2026-10-14T21:29:06Z")
> [@Nele](#): > > Just use a throw away email address. No big deal. For spam protection, this is fine. For privacy, not really, unless you use an email alias. This does not link you to your identity. I personally use an e-mail alias on the bugtracker, and I feel comfortable with this. The alias is tied to all my other accounts that are used for open-source contributions. Other aliases I use for other purposes. This is the organized and budget-friendly approach to aliases. ---
**Author:** ![Nele](https://discuss-cdn.kde.org/user_avatar/discuss.kde.org/nele/32/33508_2.png) [@Nele](https://discuss.kde.org/u/Nele)\ **Post date:** [October 14, 2026, 9:56pm UTC](https://discuss.kde.org/t/kde-identity-privacy/50952/7 "2026-10-14T21:56:17Z")
That’s actually what I meant, I just call them throw away because I only use an alias once. ---
**Author:** ![EatMyShorts](https://discuss-cdn.kde.org/user_avatar/discuss.kde.org/eatmyshorts/32/31803_2.png) [@EatMyShorts](https://discuss.kde.org/u/EatMyShorts)\ **Post date:** [October 15, 2026, 9:03am UTC](https://discuss.kde.org/t/kde-identity-privacy/50952/8 "2026-10-15T09:03:52Z")
I’ll have to switch my email there to Protonmail cause I get and alias for each of my accounts. ---
**Author:** ![Arthurium](https://discuss-cdn.kde.org/letter_avatar_proxy/v4/letter/a/57b2e6/32.png) [@Arthurium](https://discuss.kde.org/u/Arthurium)\ **Post date:** [October 15, 2026, 10:58am UTC](https://discuss.kde.org/t/kde-identity-privacy/50952/9 "2026-10-15T10:58:33Z")
I think Protonmail is one of the more expensive ways to get aliases. You get 5 for free, but to get more, the somewhat pricey subscription is needed. If you’re already going to pay for you mail, might as well use Posteo (which is cheaper) and get cheap aliases. And they include 3rd party email client support in every plan, including the 1 euro per month one. ---
**Author:** ![Cedri-kde](https://discuss-cdn.kde.org/user_avatar/discuss.kde.org/cedri-kde/32/34635_2.png) [@Cedri-kde](https://discuss.kde.org/u/Cedri-kde)\ **Post date:** [October 15, 2026, 11:41am UTC](https://discuss.kde.org/t/kde-identity-privacy/50952/10 "2026-10-15T11:41:44Z")
Not to be overly dismissive, and for sure I do read privacy policies and TOS, especially if they are demanding a lot of information, but you should simply assume that everybody and everything you give data to is feeding that up the chain. Most every TOS now has verbiage that says they can update it at anytime, for any reason, and that assumes they aren’t lying in the first place. In my opinion best practice is give out as little information as possible, and use a service that you find trustworthy for your needs to handle the creation of alias emails. There are a LOT of things we can do to protect our privacy, though nothing is perfect, and by golly gee, they sure are rabid for it. There is a friction vs utility aspect to keep in mind. Just what is your privacy worth? Once you decide that, you can fall down the rabbit hole to exactly your comfort level. The normie, relatively cheap, and very low friction way, if you are in the iOS sphere, is to use icloud email obfuscation, I forget what it’s called, and it’s what I started with. ---
**Author:** ![ddnnacheta](https://discuss-cdn.kde.org/user_avatar/discuss.kde.org/ddnnacheta/32/35898_2.png) [@ddnnacheta](https://discuss.kde.org/u/ddnnacheta)\ **Post date:** [October 15, 2026, 3:17pm UTC](https://discuss.kde.org/t/kde-identity-privacy/50952/11 "2026-10-15T15:17:56Z")
> [@Arthurium](#): > > I think Protonmail is one of the more expensive ways to get aliases. Correct. > [@Arthurium](#): > > You get 5 for free Incorrect. You only get one, and it’s not unique. It’s your original email with a different domain suffix. Like [username@protonmail.com](mailto:username@protonmail.com) and [username@proton.me](mailto:username@proton.me). Maybe older, grandfathered subscribers have 5 for free, but this is not the case now. ---
**Author:** ![Arthurium](https://discuss-cdn.kde.org/letter_avatar_proxy/v4/letter/a/57b2e6/32.png) [@Arthurium](https://discuss.kde.org/u/Arthurium)\ **Post date:** [October 15, 2026, 3:56pm UTC](https://discuss.kde.org/t/kde-identity-privacy/50952/12 "2026-10-15T15:56:30Z")
Ah I got confused with Proton Pass email aliases, which essentially act as 5 free Proton Mail aliases. They can be generated once and then I never have to use Proton Pass again if I don’t want to. They are suffixed with @passinbox.com. And I just looked on their site, they expanded that to 10, so it seems I was incorrect still, but in a different way. Nonetheless, I’m still slowly migrating all my accounts to use Posteo aliases, because not only are they more flexible (you can name them anything), it also makes me no longer a freemium customer, which always comes with a risk of enshittification, and Posteo is very ethics-first. Anyhow this message might have gotten a bit off-topic, I hope it’s okay. ---
**Author:** ![EatMyShorts](https://discuss-cdn.kde.org/user_avatar/discuss.kde.org/eatmyshorts/32/31803_2.png) [@EatMyShorts](https://discuss.kde.org/u/EatMyShorts)\ **Post date:** [October 15, 2026, 4:03pm UTC](https://discuss.kde.org/t/kde-identity-privacy/50952/13 "2026-10-15T16:03:10Z")
> [@Arthurium](#): > > I think Protonmail is one of the more expensive ways to get aliases. Not when you consider you get the VPN, their storage platform, and multiple email accounts for 20 dollars a month that includes two end users.