What version are you running? 1.6 beta 2 What's the URL of the page containing the problem? /users/<username>/ and /api/users/<username>/ Please provide any additional information below. The user page and API provide information like the e-mail address and full name. These should be hidden or masked if not logged in, and the user should be able to explicitly tell Review Board not to show their information. We should probably still show it for staff users, though, regardless of preference.