@redbrick, you are indeed correct, that giving another person the accounts data is illegal under international law. I hoever donb’t think it’s a big problem, since it would have been unlikely to happen anyways. But I can understand why @CDFalcon wrote this sentence, and it was probably just for convenience for existing users.

If we want to get technical about it, CDFalcon could delete all e-mail addresses and usernames from the table, replacing the names with account_<accountid> and send every user his account_id on request. Leaving usernames there would only be a problem when the user has used that name in multiple places and has not been seen ingame to have an account, and does not want people to know he has an account.