Listing campaign members WITHOUT email addresses

API Feedback
1

I’m asking a Patreon creator to authenticate the account, using scopes "identity campaigns w:campaigns.webhook campaigns.members" in order to be able to list that creator’s supporters. (My app will give perks to supporters, and will use a webhook to know when people come and go.) This set of scopes should, if I’m understanding the docs correctly, let me list supporters, but NOT see their email addresses or street addresses:

https://docs.patreon.com/#scopes

My list of scopes does not include either campaigns.members[email] or campaigns.members.address. The creator saw this prompt when contemplating granting permission:

Screenshot_2024-11-24_00-23-16
Screenshot_2024-11-24_00-23-16432×553 104 KB

Note that it says “each member’s full name and email address”.

How can I ensure that my app does NOT get access to people’s email addresses?

2

Your app shouldnt be able to get email access to the members unless you get the campaigns.members[email] scope. Same for the address scope. The text that appears in the interface may be modified to cover all cases.

3

So you’re saying that the consent dialog is what’s incorrect here? I’m not fully comfortable trying to reassure the creator with “trust me, it won’t reveal anything”, but if that’s what it takes, that’s what it takes.