Asking for a real-world identifier is breaking privacy from the get-go...