No, it would be illegal according to EU data protection laws: "Article 8 prohibits the processing of personal data revealing racial or ethnic origin, political

No, it would be illegal according to EU data protection laws: "Article 8 prohibits the processing of personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, and the processing of data concerning health or sex life"[0]. As you've mentioned, basically you can only use user's data for purposes stated in EULA (and they can't be overly abstract i.e. "we do anything we like with your data"). Though, sadly it's rare to see enforcement of data privacy laws except few show-off trials. P.S. currently data protection laws vary a little country by country, but even more strict, EU-wide data protection laws will enter into force next year that also applies (on paper) to non-EU companies that serves EU citizens[1]. See more at http://www.eugdpr.org/ http://www.eugdpr.org/ 0. http://ec.europa.eu/justice/data-protection/data-collection/legal/index_en.htm http://ec.europa.eu/justice/data-protection/data-collection/... 1. http://ec.europa.eu/justice/data-protection/reform/index_en.htm http://ec.europa.eu/justice/data-protection/reform/index_en....