I have to look into this. I wonder if it also applies to paid users. Also, in EU it should be somehow a loophole around GDPR if this is the case...