Arnaud a08588cf85 feat: Gravatar opt-in (off by default), configurable in Settings ...

Previously every account without a custom avatar automatically got
its email MD5-hashed and sent to gravatar.com at signup, with no way
to turn it off. Adds users.useGravatar (default false): removed the
automatic signup-time lookup entirely, and "remove photo" now falls
back to the initials placeholder instead of silently re-deriving a
Gravatar URL. New toggle in Settings -> Profile, off by default,
description explains the MD5-hash-to-third-party tradeoff. Existing
accounts' current avatarUrl is left untouched either way — no
retroactive avatar changes for anyone already using one.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

2026-07-14 09:37:29 +02:00

..

src

feat: Gravatar opt-in (off by default), configurable in Settings

2026-07-14 09:37:29 +02:00

drizzle.config.ts

feat(db): Drizzle ORM schema and migrations

2026-07-01 08:08:44 +02:00

package.json

fix: no user ever had a username, so people search found nobody

2026-07-13 17:26:12 +02:00

tsconfig.json

fix: resolve TODO.md security/perf/test-coverage backlog

2026-07-02 12:12:42 +02:00