I noticed this as well. The site is small enough it's not likely to draw enough scrutiny to face repercussions, however there's zero chance this is enough to satisfy various data protection laws.