If the user id can be joined with other data to give a name or similar then it is considered personally identifying in terms of GDPR. I am not a lawyer. You sh

If the user id can be joined with other data to give a name or similar then it is considered personally identifying in terms of GDPR. I am not a lawyer. You should hire an appropriately qualified lawyer to review your data hygiene practices.