Usually a backend is the way to go. Such as a login. Personally I use PlayFab backend service and I am super pleased. Users gets logged in to Playfab automatically via their steam with none of their Interaction.
But otherwise you could store it on their local machine unless it’s sensitive. But as stated, usually some sort of account system.