In reply to Andreas Nurbo.

Nothing is collected without the user's consent, therefore it's also legit to capture identifiable data like email.