This can be implemented without storing it. They could store a hash. No idea what they actually do.
A hash of a public identifier like an email is personally identifiable data.
A hash of a public identifier like an email is personally identifiable data.