Jesus this approach to privacy is just awful. "it's not data collection if the user volunteers it" I mean wtf. "emails aren't PII because you can use a burner".

GDPR was designed to protect consumers from companies like this.