If you're in EU or California, you should probably email the local data privacy official's offices about that.