True, I can see your public key, username, and IP I guess. I only log the username and hash of the public key/password that I use for storing save files (the logs are for debugging, but I swear I don't sell them to google). You can see what I do in the source, of course you have to trust me on that :)