Seems like you're not aware but if you collect data about European users, according to European regulations (GDPR), you are supposed to:

• allow users to delete their account as well as the data collected about them
• be able to send to users all the data collected about them
• you need a cookie consent popup for european visitors. If users decline cookies, you shouldn't track them.

Now get to work. You need to obey the laws of your country.