Some of our patrons have pointed out that they feel uncomfortable with their home adress being "protected" by just a 4-digit PIN and are worried about dataleaks.

We would like that fields like the adress, e-mail adress and phone number should be anonymised in the account portal, ex. w***.l**@g.c* instead of writing out the full e-mail adress. This way this data would be unusable if someone manages to access someone elses account.

It would also be good if libraries could decide to toggle on/off visibility for certain fields, in a similar way to how we can choose to make them editable or not.