We actually developed a GDPR module for about three weeks to catch that case. So we are legal again, since we provide all the tools you need to delete your data.