This is not true. They are allowed to figure out where the request came from, even if it is from IP information. I had a pretty nasty back and forth with a Gra

This is not true. They are allowed to figure out where the request came from, even if it is from IP information. I had a pretty nasty back and forth with a Grammarly alternative about retention of my data, where he insisted he needed my passport and a whole bunch of other stuff to fulfill the request, to verify I was requesting from Europe. I kindly reminded him that his privacy policy states the site collects IP information. After about a month of legal threats, the GDPR request was fulfilled.