Cheers for the feedback :)
I used a free privacy policy generator, which in retrospect was a mistake as it is much broader than my intentions.
If anyone is worried, no data will leave the identity provider service.
The worry comes from what you can do. If you did not want this power you would not ask for the information and explicitly say you have power over it.