In the live version, this is the only personally identifiable information collected. We use birth year rather than date of birth, and we never ask for a Social Security number, account numbers, or login credentials. The email is used for the follow-up sequence and nothing else.