What happens to somebody's ID number?

It is turned into a one-way hash on the server. The number itself is never stored and never written to a log. The hash is what makes the duplicate check possible without anybody's ID number sitting in a database.