it seems to say explicitly that it's ok with consent. providing your email when you sign up is pretty obvious consent for allowing them to use your email for login purposes lol. plus a requirement for TLS which is great, any website handling any personal information and not using TLS is just being irresponsible, especially considering it's free to use now thanks to letsencrypt