I don't know much about this, except that the "S" in httpS means secure. But the only information I have on anyone is the email they signed up with, and ip address they've logged in with. And I only look at the ip during signup, - to make sure it's not spam.
I don't e-mail the members anyway. That's personal info to me. I'd be upset if an admin used my personal email to tell me about something. I haven't had anything a pm couldn't fix so far. And that's assuming they signed up with a real e-mail address in the first place. Deegor has a fake one, that was done as a joke. (
PaulEatsDonkeyDick@vpfsucks.com)
Also, when someone donates, it goes through Paypal, no information is stored here.