While WoW didn't do this, one could avoid disclosing user data to third parties by encrypting the watermark payload.