Comment by sleepyhead

Only if there is no way to identify the user. A hash or anonymised id is still personal data if you can identify a person with it.