Markul

I think it very much depends on the country where you operate, but a random username and a password can't really be "personal information". You can always write your way out of this in your terms though.