We do not record IP addresses for clients, just for servers. The player statistics we gather are pseudonymous. We also have no incentive to record more data than we need, nor to sell it (nor do I think anyone would want to buy it anyways - but even then we won't).
I don't think we are "spying" on users, and I think we are all quite privacy concerned and want to work towards a good balance of recording pseudonymous information and and being able to provide statistics.
Should we every cross the line, you (and anyone) still have (and will always have, since this is and will remain open source code, too) the ability to setup and run an alternative master server which records as little information as you like (not recording any defeats the servers' purpose).