> Is it possible to self-host something that handles user data (name, comment, IP address) and comply with this regulation? Yes. There's something called GDPR

> Is it possible to self-host something that handles user data (name, comment, IP address) and comply with this regulation? Yes. There's something called GDPR legitimate interest (a subcategory in the "Lawful basis" someone else mentioned here), which lets you store e.g. IP addresses for security reasons, without asking for permission. See: http://www.privacy-regulation.eu/en/recital-49-GDPR.htm http://www.privacy-regulation.eu/en/recital-49-GDPR.htm I think Talkyard ( = open source comments, no ads, no tracking) is GDPR compliant. For example, people can download their personal data and delete their accounts. (I'm developing it). https://www.talkyard.io/blog-comments https://www.talkyard.io/blog-comments