You don’t get to redefine ‘personal data’ ;). The GDPR is clear about that: * ‘personal data’ means any information relating to an identified or identifiable n

You don’t get to redefine ‘personal data’ ;). The GDPR is clear about that: * ‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;* In the legal opinions that the EU provides with the GDPR, random tokens that are associated with a person are PD. An IP address is also considered personal data: https://ec.europa.eu/info/law/law-topic/data-protection/reform/what-personal-data_en#examples-of-personal-data https://ec.europa.eu/info/law/law-topic/data-protection/refo... Nothing immoral about this. What is ethical is a personal opinion, but collecting personal data (following the definition above) is simply not legal without consent in the EU.