This function is required everywhere in the area of the GDPR.
Deletion of unconfirmed entries after a certain time, deletion of logged-out users.
However, the unconfirmed users should have a few days to do this.
I think that you as the manufacturer should publish this here in concrete terms so that not all customers have to assemble this themselves