I'll hazard a guess that it takes less than 4 other data points, gathered without your knowledge or consent (but very commonly gathered nonetheless), to associa

I'll hazard a guess that it takes less than 4 other data points, gathered without your knowledge or consent (but very commonly gathered nonetheless), to associate your credit card with your google activity. And 4 data points would be a lot more than usually required.