> Yes, the EU says it's illegal if you could be logging them, regardless of whether you are or not. Wait, what? Where do they say that? > That's why I said th

> Yes, the EU says it's illegal if you could be logging them, regardless of whether you are or not. Wait, what? Where do they say that? > That's why I said theoretically you could use some international service to handle all primary routing and get users to waive their rights under the GDPR before connecting to your website proper Why would you do such a complicated thing?