What to do with a right of erasure request?

[Chiseled_Cheese]

Hello. I have a workshop menu in my game that players can upload builds to. (These builds are moderated by a team before being shown publicly.)

I have not experienced this problem yet, but I am unsure of what I should do when I eventually meet a right of erasure request from Roblox. The key to a workshop upload is the players userid and then the unix timestamp separated by a - (See an example with the small grey text under the download button in the image). Does this count as holding data to a players userid and has to be deleted? If so, then would I get a list of keys from a datastore that contain the players userid in them?

[SubtotalAnt8185]

Yes, you need to delete them.

No, I do not recommend storing data like this because it is hard to delete. As more and more keys are made, the harder it is to find them.

[Chiseled_Cheese]

so just merely including the mention of a players userid is bad enough? in the meantime, i have set up a new datastore that returns all of the workshop uploads the player owns so it is easy to remove them quickly, but i am also a little confused over what counts as having to remove a userid or not

[SubtotalAnt8185]

If you store any information that associates with the user, whether it be their user ID or username, then you must comply with GDPR policies.