If they are really hosted in Sweden, does the collected data is under Swedish law and not US as mentioned on privacy page ?