Earlier quoted context omitted.
I believe while the token is generated once, each transaction is signed with a unique signature (I believe that's the term) that only the payment processor can decipher. The merchant doesn't get any stable/identifiable information that can be used to track you across purchases/sessions/stores.
A signature doesn't hide information, it only tells you that it hasn't been modified. All the information that's being signed is by definition already in the payload given to the merchant. If it's actually encrypting information (not just signing it), then that's another thing entirely, but signatures don't hide data.
But that's not necessarily the case either, as somebody else brought up the fact that identifiers ARE in fact passed to the merchant.