My first thought, too. The contact page and even the privacy policy is devoid of identifying information.

And the faq (aside from a zero-content privacy comment) doesn't even mention malware concerns, which is a pretty weird elephant to ignore if you're on the up and up.