Store enough image data (e.g. the entire video archive) to do the mapping plus the user ID on the server.

Store all the identifying data they need to hold onto for compliance purposes plus the user ID in offline storage.