> 1. We don't write user-identifiable log data to disk; That's great... but you do log user-identifiable info? How I read that is "we log things that can identify you but just keep it in memory for X amount of time". Myself and other privacy-minded folks would like to know more details there, especially as this is a freemium service.
The short answer is we really don't want to have data. We store bits of it for aggregate analysis and debugging, but the goal is to not be able to map traffic to individual people as quickly as possible.