that's wrong, they are allowed to keep some data