I added a (dis)claimer to the front page. There’s not much to say about what data’s used; I physically cannot get more than basically a user ID, username and profile picture, as per the OAuth profile:me permission.
Either way, thanks for the warning. I don’t tend to consider the business side of things.



