Welcome back to the Auth0 Community!
Thank you for posting your question. Different websites have different approaches to this issue, and unfortunately, it doesn’t look like there’s a straight solution to this problem based on my research. My advice for this issue would be to consult the legal team directly regarding data privacy and have your TOS fully transparent about the outcome of this conversation.
Thanks
Dawid