>Even a website operator, with direct access to the database, can’t see who is the owner of your salary entry.

I'm curious about this given you can update/delete your salary entry - does there not have to be a unique identifier between the account and the entry?