An npub is a personal identifier and must be anonymized to be stored for longer than is necessary to conduct some transaction.

Also, probably need to ask people to sign a waiver to do this. GDPR