For any projects - perhaps especially small, never, ever, ever, ever use production data in test. Never. Period!
Make routines early on to generate data.This will just get harder if you wait, so start while the system is small.
With GDPR, there are laws in place that if you store sensitive data unnecessary, or use them without user's consent in - say, test, then huge fine will wait for you on the other side, so have good routines in place.
We're a place where coders share, stay up-to-date and grow their careers.
We strive for transparency and don't collect excess data.