The email is only a key to cancel later, from any device. It is stored hashed: nobody, me included, can see who reserved what.