If we believe the Windscribe words about only having hashes and an encryption key to compare, an email hash is still an unique identifier and may still break the GPDR policy depending of your country/state. Most emails hashes will be pretty weak to crack even with a 10 years old GPU and a few data sets. john.doe1990@gmail.com hash can be cracked in a matter of minutes although i guess j0h7jkajsdb@gmail.com is safe. It is pretty sad to see that a company like Windscribe and Yegor that has been blaming the VPN industry shady behaviours for years are now part of the gear by trying to hide a possible private agreement with a signed NDA to not make it public and turn it into a good samaritan offer. There was many ways to help all those customers that ended up without service, but this is probably one of the worst ones. Unfortunately we will never know what really happened since there was zero transparency with the WeVPN customers.