the logging part is obvious, but in their privacy policy they say the share it, which is something they should get consent on.