Save user information

Yes, because the session will expire one month after its creation. I think it will be safer in a session than in a database or in a cookie