This worries me a little. Perhaps because I don't fully understand what's going on under the bonnet. When I give a website my email address, some communication must happen between that website and persona. So there's some centralised persona server sending auth tokens back and forth between websites that use persona api? Am I misunderstanding?
If that's not the case, then what, exactly, information does website X have about me now that I have 'logged in using persona'?
If that's not the case, then what, exactly, information does website X have about me now that I have 'logged in using persona'?