i really should read gdpr if i want to make new websites...
- Only store information you need.
- Mention what user information you store and for how long.
- Provide an option for users to request and delete that information.
I doubt you can go wrong with that.
A lonely little town in the wider world of the fediverse.