If true, this also shows the TRUSTe privacy seal is worthless. The name implies it's undergone some kind of assessment that showed it's good for privacy when just looking at an encrypted file would immediately show the problem. TRUSTe itself is a bit vague on what they really do.

https://www.truste.com/business-products/dpm-services/#pCert

I can't find NQ in their search tool for certified companies. Perhaps it's been retracted or was never really issued? Maybe I'm looking in the wrong place

https://www.truste.com/consumer-resources/trusted-directory/