In the various guides that are available on the website, there is a section that deals with data management and explains the privacy protections that exist. It's part of the guide. I think it's probably also part of the terms and conditions that people affirm that they have read before signing. Of course, everyone reads the terms and conditions before checking that box.
On May 8th, 2018. See this statement in context.