Gravar-mail: Whose data are they anyway?