That's reasonable. I can see how GDPR would be tricky considering that a core feature is prevention of yanking of crates, a right that GDPR guarantees. I can a

That's reasonable. I can see how GDPR would be tricky considering that a core feature is prevention of yanking of crates, a right that GDPR guarantees. I can also see why people might have concerns about Google Analytics. I'm happy that crates.io has removed it. But this is likely not the point that GP was making. His FUD about analytics was somehow implying that module download statistics could somehow be used for nefarious purposes.