it would be strange, but not impossible and certainly suspect practice. You could proxy through your own vpn and then log the requests and take a look at what it's doing...