You are incorrect - this is personal data and does fall under the extremely wide scope of GDPR, which is simply "processing". Under the current data protection

You are incorrect - this is personal data and does fall under the extremely wide scope of GDPR, which is simply "processing". Under the current data protection laws, as long as it isn't personally identifying, it would fall out of scope. Under GDPR, it is in-scope, and explicit opt-in consent is required for both collection and for the things you want to use the data for. Requiring opt-in to use the software is also not permissible. GDPR is a bit of a beast.