[Bug] The shipped placeholder in Settings is the maintainer's private email address #571

New issue

Closed

opened 2026-07-22 16:13:48 +00:00 by brenno · 0 comments

brenno commented

2026-07-22 16:13:48 +00:00

Owner

Found in the first-run review ahead of publication, by a tester who had never seen the app.

Reproduce: Settings → Security → Your own details. The input field's placeholder reads brenno@dewinter.com / dewinter.com.

Evidence: lib/widgets/dialogs/parts/settings_dialog_security.dart:594 — hintText: l10n.d('brenno@dewinter.com\ndewinter.com'). Because it is a d() key it is carried in all 31 translation files. The help text above the field uses politie.nl as the example domain; that same example is in every translation too, including the English one, where it means nothing to the reader.

Why this must be fixed before publication: this is an application whose headline feature is recognising and protecting personal data. The first person to screenshot this settings panel gets a free joke at the project's expense — the privacy tool ships its author's private address in its own settings screen. Using a real government organisation's domain (politie.nl) as an illustration compounds it for an international audience.

Proposal: replace with name@example.org / example.org, and the domain example with example.org. RFC 2606 reserves those precisely for this. One source string plus the translation overlays.

Found in the first-run review ahead of publication, by a tester who had never seen the app. **Reproduce:** Settings → Security → *Your own details*. The input field's placeholder reads `brenno@dewinter.com` / `dewinter.com`. **Evidence:** `lib/widgets/dialogs/parts/settings_dialog_security.dart:594` — `hintText: l10n.d('brenno@dewinter.com\ndewinter.com')`. Because it is a `d()` key it is carried in all 31 translation files. The help text above the field uses `politie.nl` as the example domain; that same example is in every translation too, including the English one, where it means nothing to the reader. **Why this must be fixed before publication:** this is an application whose headline feature is recognising and protecting personal data. The first person to screenshot this settings panel gets a free joke at the project's expense — the privacy tool ships its author's private address in its own settings screen. Using a real government organisation's domain (`politie.nl`) as an illustration compounds it for an international audience. **Proposal:** replace with `name@example.org` / `example.org`, and the domain example with `example.org`. RFC 2606 reserves those precisely for this. One source string plus the translation overlays.

brenno added the

privacy

bug

labels

2026-07-22 16:13:48 +00:00

brenno referenced this issue from a commit

2026-07-22 16:28:53 +00:00

fix(privacy): haal het privé-adres en het echte domein uit de voorbeelden

brenno referenced this issue from a pull request that will close it,

2026-07-22 16:28:55 +00:00

fix(privacy): haal het privé-adres en het echte domein uit de voorbeelden (#571) #647

brenno closed this issue