Why would it though?
All that’s needed is a tokenisation of the ID and then a check against a central DB that exists anyway. The idea there’s some customer DB say there with
[email protected] and a list of all your fetishes seems ridiculously outlandish. The two I’ve used so far delete any data...