So it's essentially a keylogger snippet and API with a backend for analytics? Plus some how-to's on how to best hide it? Intentionally acting as a middleman bet

So it's essentially a keylogger snippet and API with a backend for analytics? Plus some how-to's on how to best hide it? Intentionally acting as a middleman between the publisher and all the shady advertisers? Seems like a slam-dunk GDPR violation to me. What's the next step? Obfuscation of the keylogger and unique snippets for every visitor? That's pretty much malware deployment technology.