consider privacy setting on profile page fixes #4