26Tem
Is a simple identification string sufficient if no personal information is stored?
I'm writing a book reading tracking website. It is pointed towards teachers. The goal is for teachers to make URLs that will add different books for pupils to read.
My problem is that I want to store information such as the pupils' reading list, how far they are in the book, and what they are thinking of it. But I don't need to store PII so I guess a simple automatically generated string of letters and numbers would be enough to identify the pupil without storing any PII like passwords or usernames.
PS: I've also thought about using localstorage but It may be limited in size in and in organization