No one is allowed to spread data about (hidden online) activity without written consent. And even if I don't have your real name/address,
@SoggyShorts , there are some people on the forums, which I can identify up to and including their home address (and some people ingame/on the forums, which I can "indirectly" identify with the help of other players). And now I even know their online times easily (ups, their doctors cerificate stated they aren't able to operate a computer at all)...
And to be honest - I don't see the problem for elvenstats.com (processing the data for non-commercial use), the problem lies at the side of innogames/elvenar (collecting the data for commercial use and providing it afterwards). Unless they change their terms of privacy.
But in the end only the first court judgements will tell us, what is allowed - and what is not.