I'm imagining the GDPR delete request for that: "Please delete the records you have on me, where 'me' is, um, <snaps selfie>."

(Not saying that's a bad system or anything, just think it's funny how the concept of identifiers plays out here.)