diff --git a/CHANGES.rst b/CHANGES.rst
index 42b6282..cb6c87a 100644
--- a/CHANGES.rst
+++ b/CHANGES.rst
@@ -4,7 +4,21 @@ Changelog for Isso
 0.9.6 (unreleased)
 ------------------
 
-- Nothing changed yet.
+- remember name, email and website in localStorage, #119
+
+- add option to hide voting feature, #115
+
+    data-isso-vote="true|false"
+
+- remove email field from JSON responses
+
+  This is a quite serious issue. For the identicon, an expensive hash is used
+  to avoid the leakage of personal information like a real email address. A
+  `git blame` reveals, the email has been unintenionally exposed since the very
+  first release of Isso :-/
+
+  The testsuite now contains a dedicated test to prevent this error in the
+  future.
 
 
 0.9.5 (2014-08-10)