Also, this data-user-email... is it possible for that to not actually be safe?