> At this point serving static html to the EU is the only safe choice. Technically even serving a blank page means you need to also serve a privacy policy beca

> At this point serving static html to the EU is the only safe choice. Technically even serving a blank page means you need to also serve a privacy policy because accessing the blank page requires the user to submit personal data for technical reasons and they have no way to know whether you'll store it. So, no, there is no "safe choice". Minimalise data use, use a generator to get a compliant privacy policy describing that use and treat your users with respect.