redis (with persistence) or a serialized user config field in a database. It's not overkill, because you'll likely wind up needing to store more user-specifc data in the future.