I think the key part is this assertion: "The Website is hosted in the United States and is intended for and directed to users in the United States." As long as

I think the key part is this assertion: "The Website is hosted in the United States and is intended for and directed to users in the United States." As long as there aren't other indications that the business is actually doing business in the EU (e.g. has German or French localization, sells stuff to EU based customers, etc), this helps demonstrate that they don't need to comply with the GDPR. While there are many companies that have chosen to try and block users in the EU, I don't think this is required, or intended by GDPR.