
Originally Posted by
Pfold
"We do not control the privacy policies of third parties that have web sites linked to the Turbine Sites and Services" -Straight from the Privacy policy
"Finally, there was a lot of speculation about how information such as your username or e-mail address was being used by our commerce partners. Ultimately we chose to pass the e-mail address to our commerce partners in the URL to facilitate e-mailing receipts to players..."
-------------------------------------------------
"Turbine may elect to share personally identifiable information of users with certain business partners for marketing or other similar purposes but ONLY if the users agree to share such information. In such event, such partners will be prohibited from disclosing such information or using such information except for the limited purposes for which such users agree to share such information. "
Everything quoted is by Turbine. The matter at hand is not whether or not email addresses are personal. The matter is that they transmitted personally indentifiable data without giving the user an opportunity to grant consent. So, if they say for example, transmitted Pfold's account name and the email address that is on the account, that information identifies me and me alone. If someone tried to access an account using that information it would be my account not yours or anyone elses. How that is wrong is that while I would agree on the intentions of Turbine for providing that data to a 3rd party, no opportunity was given for the customer to decline transmitting the data, thus, breaking their own rule.