this sounds like language (and, presumably, implementation choices) made to comply with their privacy policy and GDPR.