> Most forums are created with softwares handling everything, virtually nobody creates a forum from scratch with his own tech stack. If you don't host the foru

> Most forums are created with softwares handling everything, virtually nobody creates a forum from scratch with his own tech stack. If you don't host the forum yourself you need a data processing agreement with the hoster to be GDPR compliant. If you want to load the user image from Gravatar, you need a DPA with Tumblr. Good luck with that. Reading contracts and laws in good faith is a pretty bad idea if you don't like being sued and loosing. Always read laws in a way as if someone was going to use it just to ruin your day.