Right to be forgotten endpoint

[einar-hjortdal]

There should be a route to allow an authenticated user to delete its own data.

Data should be anonymized: email, first_name, last_name should be deleted from the database. email is NOT NULL so it should be replaced by a placeholder email such as [email protected]. References to the deleted user can rely on id only.

This concerns every store dealing with EU citizens, which means all stores in any country dealing with any EU citizen inside or outside of the EU. Welcome to the brussels effect.