Note: if personal data is being stored using a secret database, then it is only visible to the user and to administrators.