Just noticed that advisor is uploaded to every site player has api-key in site's profile and site is checked in preferences, mainly it concerns boxcar (and maybe its successor) but still giving free spyops to possible enemy isn't nice.

That's boxcar's setup though.

half and half, advisor shouldn't be uploaded to elsewhere than site mentioned in clans-page.

some alliances remove access to anything after leaves so can't remove api-key afterwards.

Perhaps a good solution is to have a "request to change API key" button that automatically or otherwise generates that player a new API key.

I thought there was one of those ...

edit:
log in a country, click preferences at the bottom of the main page, and you should see this just a little bit down the page:

http://i.imgur.com/OK8jM.png

it's there in FFA at least, not wasting bonus turns on alliance :P

Aha, nice catch Azz kikr.

Yes, we advised all of our folks to change their API keys after the whole boxcar fiasco since we temporarily were using ops sharing on 3 different sites during the downtime. LoL...

Hopefully all our members complied. heh.

Ah we have a feature for that? sweet; didn't know pang added that ;)