As far as I'm aware, any online identifier, even a random number created by me, falls under the GDPR. This answer lays it out pretty well https://law.stackexch

As far as I'm aware, any online identifier, even a random number created by me, falls under the GDPR. This answer lays it out pretty well https://law.stackexchange.com/questions/82133/are-auto-generated-identifiers-pii-if-they-cannot-be-linked-to-an-identity https://law.stackexchange.com/questions/82133/are-auto-gener...